PT-2025-8145 · Linux+2 · Linux Kernel+2
Published
2022-02-22
·
Updated
2025-05-09
·
CVE-2022-49217
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been resolved. The issue is related to the
pm8001 send abort all() function, where the n elem field of the ccb used is not initialized to 0. This missing initialization can lead to the execution of invalid dma unmap sg() calls in pm8001 ccb task free(), causing a crash. The vulnerability can be avoided by always initializing the ccb n elem field to 0 in pm8001 send abort all(), pm8001 send read log(), and pm80xx send abort all().Recommendations
Always initialize the
ccb n elem field to 0 in pm8001 send abort all(), pm8001 send read log(), and pm80xx send abort all() to avoid the issue. As a temporary workaround, consider disabling the pm8001 ccb task free() function until a patch is available. Restrict access to the vulnerable pm80xx module to minimize the risk of exploitation. Avoid using the ccb n elem field in the affected functions until the issue is resolved.Exploit
Fix
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse