PT-2025-37627 · Intel+5 · Intel Advanced Socs+5

Published 2022-10-17 · Updated 2025-12-04 · CVE-2022-50325

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential receive (RX) buffer overflow exists in the Intel Advanced SoCs (ASoC) driver. An event triggering the firmware to return an invalid RX size for LARGE CONFIG GET could lead to memcpy fromio() copying an excessive number of bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

BDU:2026-02039

CESA-2023_2951

CVE-2022-50325

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Intel Advanced Socs

Linux Kernel

Red Hat

Suse

References · 836

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50325.json · Exploit
• https://bdu.fstec.ru/vul/2026-02039 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50325 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50325 · Vendor Advisory
• https://git.kernel.org/stable/c/23ae34e033b2c0e5e88237af82b163b296fd6aa9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50325 · Security Note
• https://git.kernel.org/stable/c/ec1f0c12cb2e614c3fa8e9402f7ffcf82166078a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50325 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50325 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50325 · Security Note
• https://git.kernel.org/stable/c/0bad12fee5ae16ab439d97c66c4238f5f4cc7f68 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50325 · Vendor Advisory
• https://bugzilla.suse.com/1250814 · Note