PT-2025-26057 · Linux+4 · Linux Kernel+4
Published
2022-05-10
·
Updated
2025-07-28
·
CVE-2022-50131
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A buffer overflow issue has been identified in the Linux kernel, specifically in the
mcp smbus write() function. This issue arises due to the len variable, which can take a value between 0-255 from user data, potentially leading to a buffer overflow in memcpy(). The mcp->txbuf[5] and buf are too small to handle the maximum value of 255, with sizes of 59 and 34, respectively. A bound check has been added to prevent this buffer overflow.Recommendations
To resolve this issue, apply the patch that adds a bound check to prevent the buffer overflow in
mcp smbus write().
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse