CVE-2022-50142

intel_th: msu: Fix vmalloced buffers

HIGH

7.8

CVSS Score

Published: June 18, 2025 at 11:03 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: intel_th: msu: Fix vmalloced buffers After commit f5ff79fddf0e ("dma-mapping: remove CONFIG_DMA_REMAP") there's a chance of DMA buffer getting allocated via vmalloc(), which messes up the mmapping code: > RIP: msc_mmap_fault [intel_th_msu] > Call Trace: > <TASK> > __do_fault > do_fault ... Fix this by accounting for vmalloc possibility.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.2 ≤ v < 5.10.1375.2 ≤ v < 5.15.615.2 ≤ v < 5.18.185.2 ≤ v < 5.19.25.2 ≤ v < 5.4.2115.2 ≤ v < 6.05.5 ≤ v < 5.10.1375.2ba39bd8306057fb343dfb75d93a76d824b625236

Vendor states this is fixed in 0ed72c6bc632cbf8d979ac60f982ff84b7bb610a (fixed)

Vendor states this is fixed in 4914c50670b6a531e2cb17cd984cc565b4681312 (fixed)

Vendor states this is fixed in 566887bad7ff2297d6b3f9659c702ba075f3d62d (fixed)

Vendor states this is fixed in 6ae2881c1d1fa0e33f4763b7c786f8ef05a9c828 (fixed)

Vendor states this is fixed in ac12ad3ccf6d386e64a9d6a890595a2509d24edd (fixed)

Vendor states this is fixed in b5d924cb4c7b952eaa61622f14427723a78137a3 (fixed)

Vendor states this is fixed in 5.10.137 (unaffected)

Vendor states this is fixed in 5.15.61 (unaffected)

Vendor states this is fixed in 5.18.18 (unaffected)

Vendor states this is fixed in 5.19.2 (unaffected)

Vendor states this is fixed in 5.2 (unaffected)

Vendor states this is fixed in 5.4.211 (unaffected)