CVE-2022-50756

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the NVMe-PCI subsystem related to memory pool allocation size. A calculation error could lead to memory corruption beyond the allocated memory pool size when determining the number of PRP lists required. This issue was observed by kfence and, while unlikely, could occur with a 4MB request in 127 physical segments on a queue that does not support SGLs. The root cause is an incorrect rounding of the maximum size calculation, potentially requiring two PRP lists instead of one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.