CVE-2022-50614
BaseFortify
Publication date: 2025-12-08
Last updated on: 2025-12-08
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's pci_endpoint_test component, where the dma_map_single() function does not allow zero-length mappings. If a zero-length mapping is attempted, it causes the kernel to panic, leading to a system crash. The issue was specifically observed on arm64 architectures and results from the lack of checking for zero payload length before mapping. The fix involves adding a check to ensure the payload length is not zero before proceeding.
How can this vulnerability impact me? :
This vulnerability can cause the Linux kernel to panic and crash when a zero-length DMA mapping is attempted in the pci_endpoint_test module. This can lead to system instability, unexpected reboots, and potential downtime, especially on affected arm64 systems running the vulnerable kernel version.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring the system logs for kernel panic messages related to pci_endpoint_test and dma_map_single zero length mapping errors. Specifically, look for kernel BUG or panic messages similar to the provided log snippet indicating a panic in swiotlb_tbl_map_single or pci_endpoint_test_ioctl. Commands to check the kernel logs include: 'dmesg | grep -i pci_endpoint_test' or 'journalctl -k | grep -i pci_endpoint_test'.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation involves updating the Linux kernel to a version that includes the patch fixing the pci_endpoint_test panic caused by zero length dma_map_single mappings. Until the patch is applied, avoid running pci_endpoint_test operations that may trigger zero length DMA mappings to prevent kernel panic.