CVE-2022-50575— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 16
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 3ad0876554cafa368f574d4d408468510543e9ff< 5d68ae32d132ea2af73bc223fd64c46f85302a8b | affected |
3ad0876554cafa368f574d4d408468510543e9ff< 4f983ee5e5de924d93a7bbb4e6f68f38c6256cd5 | affected | ||
3ad0876554cafa368f574d4d408468510543e9ff< 46026bb057c35f5bb111bf95e00cd8366d2e34d4 | affected | ||
3ad0876554cafa368f574d4d408468510543e9ff< 0bf874183b32eae2cc20e3c5be38ec3d33e7e564 | affected | ||
3ad0876554cafa368f574d4d408468510543e9ff< e0c5f1058ed96f2b7487560c4c4cbd768d13d065 | affected | ||
3ad0876554cafa368f574d4d408468510543e9ff< 4da411086f5ab32f811a89ef804980ec106ebb65 | affected | ||
3ad0876554cafa368f574d4d408468510543e9ff< 8b997b2bb2c53b76a6db6c195930e9ab8e4b0c79 | affected | ||
4.18 | affected | ||
| … +8 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-50575の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than(>=) MAX_ORDER, then kcalloc() will fail, it creates a stack trace and messes up dmesg with a warning. Call trace: -> privcmd_ioctl --> privcmd_ioctl_mmap_resource Add __GFP_NOWARN in order to avoid too large allocation warning. This is detected by static analysis using smatch.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未限制用户控制的内存分配大小，可能导致拒绝服务攻击。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-50575の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-50575のインテリジェンス情報
请登录查看更多情报信息。
CVE-2022-50575 补丁与修复 (7)
Same Patch Batch · Linux · 2025-10-22 · 67 CVEs total
| CVE-2023-53711 | 8.2 HIGH | NFS: Fix a potential data corruption |
| CVE-2023-53705 | 8.2 HIGH | ipv6: Fix out-of-bounds access in ipv6_find_tlv() |
| CVE-2023-53698 | 7.8 HIGH | xsk: fix refcount underflow in error path |
| CVE-2023-53692 | 7.8 HIGH | ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline |
| CVE-2022-50569 | 7.8 HIGH | xfrm: Update ipcomp_scratches with NULL when freed |
| CVE-2022-50570 | 7.8 HIGH | platform/chrome: fix memory corruption in ioctl |
| CVE-2022-50567 | 7.8 HIGH | fs: jfs: fix shift-out-of-bounds in dbAllocAG |
| CVE-2023-53718 | 7.8 HIGH | ring-buffer: Do not swap cpu_buffer during resize process |
| CVE-2023-53695 | 7.8 HIGH | udf: Detect system inodes linked into directory hierarchy |
| CVE-2023-53707 | 7.8 HIGH | drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 |
| CVE-2022-50581 | 7.8 HIGH | hfs: fix OOB Read in __hfs_brec_find |
| CVE-2023-53729 | 7.8 HIGH | soc: qcom: qmi_encdec: Restrict string length in decode |
| CVE-2023-53713 | 7.8 HIGH | arm64: sme: Use STR P to clear FFR context field in streaming SVE mode |
| CVE-2023-53726 | 7.1 HIGH | arm64: csum: Fix OoB access in IP checksum code for negative lengths |
| CVE-2023-53704 | clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() | |
| CVE-2023-53706 | mm/vmemmap/devdax: fix kernel crash when probing devdax devices | |
| CVE-2023-53710 | wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read | |
| CVE-2023-53708 | ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects | |
| CVE-2023-53712 | ARM: 9317/1: kexec: Make smp stop calls asynchronous | |
| CVE-2023-53714 | drm/stm: ltdc: fix late dereference check |
Showing 20 of 67 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on
同じベンダー: Linux
- CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on
V. CVE-2022-50575へのコメント
まだコメントはありません