250 lines
12 KiB
JSON
250 lines
12 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2022-50271",
|
|
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "Linux",
|
|
"dateReserved": "2025-09-15T13:58:00.975Z",
|
|
"datePublished": "2025-09-15T14:21:07.563Z",
|
|
"dateUpdated": "2026-05-11T19:16:06.028Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"shortName": "Linux",
|
|
"dateUpdated": "2026-05-11T19:16:06.028Z"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost/vsock: Use kvmalloc/kvfree for larger packets.\n\nWhen copying a large file over sftp over vsock, data size is usually 32kB,\nand kmalloc seems to fail to try to allocate 32 32kB regions.\n\n vhost-5837: page allocation failure: order:4, mode:0x24040c0\n Call Trace:\n [<ffffffffb6a0df64>] dump_stack+0x97/0xdb\n [<ffffffffb68d6aed>] warn_alloc_failed+0x10f/0x138\n [<ffffffffb68d868a>] ? __alloc_pages_direct_compact+0x38/0xc8\n [<ffffffffb664619f>] __alloc_pages_nodemask+0x84c/0x90d\n [<ffffffffb6646e56>] alloc_kmem_pages+0x17/0x19\n [<ffffffffb6653a26>] kmalloc_order_trace+0x2b/0xdb\n [<ffffffffb66682f3>] __kmalloc+0x177/0x1f7\n [<ffffffffb66e0d94>] ? copy_from_iter+0x8d/0x31d\n [<ffffffffc0689ab7>] vhost_vsock_handle_tx_kick+0x1fa/0x301 [vhost_vsock]\n [<ffffffffc06828d9>] vhost_worker+0xf7/0x157 [vhost]\n [<ffffffffb683ddce>] kthread+0xfd/0x105\n [<ffffffffc06827e2>] ? vhost_dev_set_owner+0x22e/0x22e [vhost]\n [<ffffffffb683dcd1>] ? flush_kthread_worker+0xf3/0xf3\n [<ffffffffb6eb332e>] ret_from_fork+0x4e/0x80\n [<ffffffffb683dcd1>] ? flush_kthread_worker+0xf3/0xf3\n\nWork around by doing kvmalloc instead."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"product": "Linux",
|
|
"vendor": "Linux",
|
|
"defaultStatus": "unaffected",
|
|
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
|
|
"programFiles": [
|
|
"drivers/vhost/vsock.c",
|
|
"net/vmw_vsock/virtio_transport_common.c"
|
|
],
|
|
"versions": [
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "0d720c3f0a03e97867deab7e480ba3d3e19837ba",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "7aac8c63f604e6a6a46560c0f0188cd0332cf320",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "e6d0152c95108651f1880c1ddfab47cb9e3e62d0",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "b4a5905fd2ef841cd61e969ea692c213c2e5c1f7",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "e28a4e7f0296824c61a81e7fd54ab48bad3e75ad",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "a99fc6d818161d6f1ff3307de8bf5237f6cc34d8",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "36c9f340c60413e28f980c0224c4e9d35851526b",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "433fc58e6bf2c8bd97e57153ed28e64fd78207b8",
|
|
"lessThan": "0e3f72931fc47bb81686020cc643cde5d9cd0bb8",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "Linux",
|
|
"vendor": "Linux",
|
|
"defaultStatus": "affected",
|
|
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
|
|
"programFiles": [
|
|
"drivers/vhost/vsock.c",
|
|
"net/vmw_vsock/virtio_transport_common.c"
|
|
],
|
|
"versions": [
|
|
{
|
|
"version": "4.8",
|
|
"status": "affected"
|
|
},
|
|
{
|
|
"version": "0",
|
|
"lessThan": "4.8",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "4.14.296",
|
|
"lessThanOrEqual": "4.14.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "4.19.262",
|
|
"lessThanOrEqual": "4.19.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.4.220",
|
|
"lessThanOrEqual": "5.4.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.10.150",
|
|
"lessThanOrEqual": "5.10.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.15.75",
|
|
"lessThanOrEqual": "5.15.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.19.17",
|
|
"lessThanOrEqual": "5.19.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.0.3",
|
|
"lessThanOrEqual": "6.0.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.1",
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"versionType": "original_commit_for_fix"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"cpeApplicability": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "4.14.296"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "4.19.262"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "5.4.220"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "5.10.150"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "5.15.75"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "5.19.17"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "6.0.3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "4.8",
|
|
"versionEndExcluding": "6.1"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/0d720c3f0a03e97867deab7e480ba3d3e19837ba"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/7aac8c63f604e6a6a46560c0f0188cd0332cf320"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/e6d0152c95108651f1880c1ddfab47cb9e3e62d0"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/b4a5905fd2ef841cd61e969ea692c213c2e5c1f7"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/e28a4e7f0296824c61a81e7fd54ab48bad3e75ad"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/a99fc6d818161d6f1ff3307de8bf5237f6cc34d8"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/36c9f340c60413e28f980c0224c4e9d35851526b"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/0e3f72931fc47bb81686020cc643cde5d9cd0bb8"
|
|
}
|
|
],
|
|
"title": "vhost/vsock: Use kvmalloc/kvfree for larger packets.",
|
|
"x_generator": {
|
|
"engine": "bippy-1.2.0"
|
|
}
|
|
}
|
|
}
|
|
} |