CVE-2022-50399 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in sh_css_set_black_frame() The "height" and "width" values come from the user so the "height * width" multiplication can overflow.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/3ad290194bb06979367622e47357462836c1d3b4
https://git.kernel.org/stable/c/a549517e4b761f3940011db30320cb8c9badde54
https://git.kernel.org/stable/c/a560aeac2f2d284903b5900774765d7fc61547bc

History

Thu, 18 Sep 2025 13:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in sh_css_set_black_frame() The "height" and "width" values come from the user so the "height * width" multiplication can overflow.
Title		media: atomisp: prevent integer overflow in sh_css_set_black_frame()
References		https://git.kernel.org/stable/c/3ad290194bb06979367622e47357462836c1d3b4 https://git.kernel.org/stable/c/a549517e4b761f3940011db30320cb8c9badde54 https://git.kernel.org/stable/c/a560aeac2f2d284903b5900774765d7fc61547bc

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-18T13:33:16.647Z

Updated: 2025-09-18T13:33:16.647Z

Reserved: 2025-09-17T14:53:06.999Z

Link: CVE-2022-50399

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-50399", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-09-17T14:53:06.999Z", "datePublished": "2025-09-18T13:33:16.647Z", "dateUpdated": "2025-09-18T13:33:16.647Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-09-18T13:33:16.647Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: prevent integer overflow in sh_css_set_black_frame()\n\nThe \"height\" and \"width\" values come from the user so the \"height * width\"\nmultiplication can overflow."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/staging/media/atomisp/pci/sh_css_params.c"], "versions": [{"version": "a49d25364dfb9f8a64037488a39ab1f56c5fa419", "lessThan": "a560aeac2f2d284903b5900774765d7fc61547bc", "status": "affected", "versionType": "git"}, {"version": "a49d25364dfb9f8a64037488a39ab1f56c5fa419", "lessThan": "a549517e4b761f3940011db30320cb8c9badde54", "status": "affected", "versionType": "git"}, {"version": "a49d25364dfb9f8a64037488a39ab1f56c5fa419", "lessThan": "3ad290194bb06979367622e47357462836c1d3b4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/staging/media/atomisp/pci/sh_css_params.c"], "versions": [{"version": "4.12", "status": "affected"}, {"version": "0", "lessThan": "4.12", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.77", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.0.7", "lessThanOrEqual": "6.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "5.15.77"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a560aeac2f2d284903b5900774765d7fc61547bc"}, {"url": "https://git.kernel.org/stable/c/a549517e4b761f3940011db30320cb8c9badde54"}, {"url": "https://git.kernel.org/stable/c/3ad290194bb06979367622e47357462836c1d3b4"}], "title": "media: atomisp: prevent integer overflow in sh_css_set_black_frame()", "x_generator": {"engine": "bippy-1.2.0"}}}}