Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50575

xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than(>=) MAX_ORDER, then kcalloc() will fail, it creates a stack trace and messes up dmesg with a warning. Call trace: -> privcmd_ioctl --> privcmd_ioctl_mmap_resource Add __GFP_NOWARN in order to avoid too large allocation warning. This is detected by static analysis using smatch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3ad0876554cafa368f574d4d408468510543e9ff to < 5d68ae32d132ea2af73bc223fd64c46f85302a8baffected
  • 3ad0876554cafa368f574d4d408468510543e9ff to < 4f983ee5e5de924d93a7bbb4e6f68f38c6256cd5affected
  • 3ad0876554cafa368f574d4d408468510543e9ff to < 46026bb057c35f5bb111bf95e00cd8366d2e34d4affected
  • 3ad0876554cafa368f574d4d408468510543e9ff to < 0bf874183b32eae2cc20e3c5be38ec3d33e7e564affected
  • 3ad0876554cafa368f574d4d408468510543e9ff to < e0c5f1058ed96f2b7487560c4c4cbd768d13d065affected
  • 3ad0876554cafa368f574d4d408468510543e9ff to < 4da411086f5ab32f811a89ef804980ec106ebb65affected
  • 3ad0876554cafa368f574d4d408468510543e9ff to < 8b997b2bb2c53b76a6db6c195930e9ab8e4b0c79affected

Linux Linux

Default version status: affected

  • 4.18affected
  • 0 to < 4.18unaffected
  • 4.19.270 to ≤ 4.19.*unaffected
  • 5.4.229 to ≤ 5.4.*unaffected
  • 5.10.163 to ≤ 5.10.*unaffected
  • 5.15.86 to ≤ 5.15.*unaffected
  • 6.0.16 to ≤ 6.0.*unaffected
  • 6.1.2 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References