CVE-2022-50540: dmaengine: qcom-adm: fix wrong sizeof config in slave_config
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: qcom-adm: fix wrong sizeof config in slaveconfig
Fix broken slaveconfig function that uncorrectly compare the peripheralsize with the size of the config pointer instead of the size of the config struct. This cause the crci value to be ignored and cause a kernel panic on any slave that use adm driver.
To fix this, compare to the size of the struct and NOT the size of the pointer.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50540?
CVE-2022-50540 has a medium severity rating due to the potential for improper input validation in the Linux kernel.
How do I fix CVE-2022-50540?
To fix CVE-2022-50540, update your Linux kernel to the latest stable version that includes the security patch.
What systems are affected by CVE-2022-50540?
CVE-2022-50540 affects various distributions of the Linux kernel that utilize the dmaengine subsystem.
What are the potential impacts of CVE-2022-50540?
Exploiting CVE-2022-50540 may lead to unexpected behavior in driver functions, potentially impacting system stability.
Is CVE-2022-50540 being actively exploited?
As of now, there are no public reports indicating that CVE-2022-50540 is actively being exploited in the wild.