CVE-2022-50307
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-04
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.1 (inc) to 5.15.78 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.0.7 (exc) |
| linux | linux_kernel | 5.15 |
| linux | linux_kernel | 5.15 |
| linux | linux_kernel | 5.15 |
| linux | linux_kernel | 5.15 |
| linux | linux_kernel | 5.15 |
| linux | linux_kernel | 6.1 |
| linux | linux_kernel | 6.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds read access in the Linux kernel's s390 channel-subsystem-driver. It occurs when the driver scans for newly available devices after device-IDs are removed from the cio_ignore list. An optimization introduced to exclude online devices from scanning incorrectly assumes a certain data structure for I/O subchannels. For devices using a non-default I/O subchannel driver, this assumption leads to out-of-bounds memory access during each scan. The fix changes the scan logic to use a driver-independent indication of whether a subchannel is enabled, preventing the out-of-bounds access.
How can this vulnerability impact me? :
This vulnerability can cause out-of-bounds memory reads in the Linux kernel on s390 systems when scanning devices, which may lead to system instability, crashes, or potential information disclosure depending on how the out-of-bounds data is handled.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, avoid triggering the device scan that uses the cio_ignore free command until a patched kernel version is applied. Specifically, do not execute commands like 'echo free > /proc/cio_ignore' on affected systems. Apply the kernel update that includes the fix for the out-of-bounds access in the s390/cio driver as soon as it becomes available.