PT-2025-41046 · Linux+4 · Linux Kernel+4

Published 2024-11-12 · Updated 2026-03-14 · CVE-2022-50541

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s dmaengine subsystem, specifically within the ti k3-udma component. The UDMA CHAN RT byte counters, used to track byte counts during data transfers, can overflow when handling transfers exceeding 4GB. This overflow affects the completion calculation of operations, potentially causing transfers to hang indefinitely. The issue is addressed by decreasing the byte count for each completed transaction, preventing the counters from overflowing and ensuring accurate byte count statistics are maintained. The uc->bcnt variable is no longer necessary as the RT counters now maintain the statistics of the current transaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50541

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Debian

Linux Kernel

Red Hat

Suse

Ti K3-Udma

References · 447

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50541.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:4320-1 · Vendor Advisory
• https://git.kernel.org/stable/c/7c94dcfa8fcff2dba53915f1dabfee49a3df8b88 · Patch
• https://git.kernel.org/stable/c/a065657643a62a24b4435ddcaea45f1e9378749e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50541 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50541 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50541 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50541 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50541 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d68da10b0cceb4177b653833e794b2923a4ffbd7 · Patch
• https://osv.dev/vulnerability/CVE-2022-50541 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50541 · Security Note