The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
MediumVulnerability
CVE-2022-50055: In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2022-50055
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2022-50055 is a fix in the Linux kernel's iavf driver, which handles the Intel Ethernet Adaptive Virtual Function. When configuring the ASQ and ARQ registers fails, iavf_alloc_asq_bufs and iavf_alloc_arq_bufs leave their DMA coherent buffers allocated. On interface unload, the kernel's DMA debug facility then reports these pending allocations, for example 32 entries of 4096 bytes each.
Mitigation
The fix frees the DMA regions for both ASQ and ARQ when an error occurs during configuration of the ASQ/ARQ registers.