CVE-2022-50575

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the xen/privcmd component, specifically in the privcmd ioctl mmap resource() function. The issue arises because the kdata.num variable, which is controlled by the user, can be used to request a memory allocation larger than or equal to MAX ORDER. When this occurs, the kcalloc() function fails, resulting in a stack trace and a warning message in the system log (dmesg). The fix involves adding the GFP NOWARN flag to avoid the allocation warning. This issue was identified through static analysis using smatch.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.