CVE-2022-50036: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability (CVE-2022-50036) has been identified in the Linux kernel's drm/sun4i DSI driver. The issue was discovered and disclosed on June 18, 2025, affecting the Direct Rendering Manager (DRM) subsystem in the Linux kernel (NVD, Wiz).

The vulnerability stems from an underflow condition when computing packet sizes in the DSI driver. The packet overhead is subtracted using unsigned arithmetic, which with a short sync pulse could underflow and wrap around to near the maximal u16 value. The fix implements signed subtraction, with the max() function handling any negative numbers that might be produced. The same fix was applied to other timing calculations, though those subtractions were less likely to underflow (NVD, Wiz).

The vulnerability could lead to incorrect packet size calculations in the DRM subsystem, potentially affecting display functionality on systems using the sun4i DSI driver. The underflow and subsequent wraparound could cause unexpected behavior in display timing and synchronization (Wiz).

The issue has been resolved in the Linux kernel through a patch that changes the arithmetic operations from unsigned to signed subtraction. The fix ensures that the max() function correctly handles any negative numbers that might be produced during the calculation (Wiz).