CVE-2022-50055

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50055
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavf_alloc_asq_bufs/iavf_alloc_arq_bufs allocates with dma_alloc_coherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ in case error happens during configuration of ASQ/ARQ registers. Without this change it is possible to see when unloading interface: 74626.583369: dma_debug_device_change: device driver has pending DMA allocations while released from device [count=32] One of leaked entries details: [device address=0x0000000b27ff9000] [size=4096 bytes] [mapped with DMA_BIDIRECTIONAL] [mapped as coherent]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/35c63581fdefdcbaeae8cded18908523252353ad Patch
https://git.kernel.org/stable/c/419831617ed349992c84344dbd9e627f9e68f842 Patch
https://git.kernel.org/stable/c/4fe80492d53971d9a49f39f3c86d2d67c6f3638a Patch
https://git.kernel.org/stable/c/dab6b551f5ba4c79a0dd4970dd8533c37a7b100f Patch
https://git.kernel.org/stable/c/ff289f2be5899efd0e897d2b434a78e36df2c69b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

13 Nov 2025, 18:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/35c63581fdefdcbaeae8cded18908523252353ad - () https://git.kernel.org/stable/c/35c63581fdefdcbaeae8cded18908523252353ad - Patch
References () https://git.kernel.org/stable/c/419831617ed349992c84344dbd9e627f9e68f842 - () https://git.kernel.org/stable/c/419831617ed349992c84344dbd9e627f9e68f842 - Patch
References () https://git.kernel.org/stable/c/4fe80492d53971d9a49f39f3c86d2d67c6f3638a - () https://git.kernel.org/stable/c/4fe80492d53971d9a49f39f3c86d2d67c6f3638a - Patch
References () https://git.kernel.org/stable/c/dab6b551f5ba4c79a0dd4970dd8533c37a7b100f - () https://git.kernel.org/stable/c/dab6b551f5ba4c79a0dd4970dd8533c37a7b100f - Patch
References () https://git.kernel.org/stable/c/ff289f2be5899efd0e897d2b434a78e36df2c69b - () https://git.kernel.org/stable/c/ff289f2be5899efd0e897d2b434a78e36df2c69b - Patch
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iavf: Se corrige el error de administración de iavf_alloc_asq_bufs/iavf_alloc_arq_bufs al asignar memoria con dma_alloc_coherent para el buzón VF. Se liberan regiones DMA para ASQ y ARQ en caso de error durante la configuración de los registros ASQ/ARQ. Sin este cambio, al descargar la interfaz, se puede observar lo siguiente: 74626.583369: dma_debug_device_change: el controlador del dispositivo tiene asignaciones de DMA pendientes al ser liberado del dispositivo [count=32]. Una de las entradas filtradas detalla: [device address=0x0000000b27ff9000] [size=4096 bytes] [mapeado con DMA_BIDIRECTIONAL] [mapeado como coherente]
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:26

NVD link : CVE-2022-50055

Mitre link : CVE-2022-50055

CVE.ORG link : CVE-2022-50055

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo