PT-2025-37627 · Intel+5 · Intel Advanced Socs+5

Publicado 2022-10-17 · Atualizado 2025-12-04 · CVE-2022-50325

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential receive (RX) buffer overflow exists in the Intel Advanced SoCs (ASoC) driver. An event triggering the firmware to return an invalid RX size for LARGE CONFIG GET could lead to memcpy fromio() copying an excessive number of bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-120

Identificadores relacionados

BDU:2026-02039

CESA-2023_2951

CVE-2022-50325

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Produtos afetados

Astra Linux

Centos

Intel Advanced Socs

Linux Kernel

Red Hat

Suse

Referências · 836

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50325.json · Exploit
• https://bugzilla.suse.com/1250814 · Nota
• https://bugzilla.suse.com/1250106 · Nota
• https://bugzilla.suse.com/1249220 · Nota
• https://bugzilla.suse.com/1250807 · Nota
• https://bugzilla.suse.com/1250309 · Nota
• https://suse.com/security/cve/CVE-2022-50329 · Nota
• https://bugzilla.suse.com/1250151 · Nota
• https://suse.com/security/cve/CVE-2022-50399 · Nota
• https://bugzilla.suse.com/1250872 · Nota
• https://suse.com/security/cve/CVE-2023-53295 · Nota
• https://suse.com/security/cve/CVE-2022-50444 · Nota
• https://suse.com/security/cve/CVE-2022-50357 · Nota
• https://bugzilla.suse.com/1250830 · Nota
• https://git.kernel.org/linus/23ae34e033b2c0e5e88237af82b163b296fd6aa9 · Nota