CVE-2022-50437: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50437 is a vulnerability in the Linux kernel's DRM/MSM HDMI driver discovered and disclosed on October 1, 2025. The vulnerability affects the bridge counter validation in the HDMI subsystem, where missing sanity checks could lead to memory corruption when there are more than eight bridges (NVD, Ubuntu).

The vulnerability stems from a missing sanity check on the bridge counter in the DRM/MSM HDMI driver, which could allow corrupting data beyond the fixed-sized bridge array when there are more than eight bridges. The issue has been assigned a CVSS v3.1 base score of 5.5, indicating moderate severity, with an attack vector requiring local access (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) (RedHat).

The vulnerability could lead to memory corruption in affected systems when exploited. This could potentially result in system instability or denial of service conditions in the HDMI subsystem of affected Linux kernels (NVD).

Multiple Linux distributions have released patches to address this vulnerability. Ubuntu has fixed the issue in several kernel versions including linux-hwe-5.15 (5.15.0-60.66~20.04.1) for 20.04 LTS and linux-kvm (5.4.0-1086.92) for 20.04 LTS. Red Hat has also provided fixes for affected systems (Ubuntu).