vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-50518

parisc: Fix locking in pdc_iodc_print() firmware call

HIGH
7.8
CVSS Score
Published: October 7, 2025 at 03:19 PM UTC
Updated: August 5, 2026 at 09:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdc_iodc_print() firmware call Utilize pdc_lock spinlock to protect parallel modifications of the iodc_dbuf[] buffer, check length to prevent buffer overflow of iodc_dbuf[], drop the iodc_retbuf[] buffer and fix some wrong indentings.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
v ≥ 2.6.24.52.6.24.5 ≤ v < 2.6.252.6.25 ≤ v < 6.0.182.6.25 ≤ v < 6.1.42.6.25 ≤ v < 6.22.6.25.1 ≤ v < 6.0.186.1 ≤ v < 6.1.42.6.24.52.6.252.6.25 rc62.6.25 rc72.6.25 rc82.6.25 rc924319896af06b84f965bcefa0f2d926b726ed05bef1afd4d79f0479960ff36bb5fe6ec6eba1ebff2
Vendor states this is fixed in 04a603058e70b8b881bb7860b8bd649f931f2591 (fixed)
Vendor states this is fixed in 553bc5890ed96a8d006224c3a4673c47fee0d12a (fixed)
Vendor states this is fixed in 7236aae5f81f3efbd93d0601e74fc05994bc2580 (fixed)
Vendor states this is fixed in 2.6.25 (unaffected)
Vendor states this is fixed in 6.0.18 (unaffected)
Vendor states this is fixed in 6.1.4 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

References (3)

Patch
Source: cverecord
https://git.kernel.org/stable/c/04a603058e70b8b881bb7860b8bd649f931f2591
Patch
Source: cverecord
https://git.kernel.org/stable/c/553bc5890ed96a8d006224c3a4673c47fee0d12a
Patch
Source: cverecord
https://git.kernel.org/stable/c/7236aae5f81f3efbd93d0601e74fc05994bc2580

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-667

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card