CVE-2022-50756
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
nvme-pci: fix mempool alloc size
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the max size to bytes to match the units of the divisor that calculates the worst-case number of PRP entries. The result is used to determine how many PRP Lists are required. The code was previously rounding this to 1 list, but we can require 2 in the worst case. In that scenario, the driver would corrupt memory beyond the size provided by the mempool. While unlikely to occur (you'd need a 4MB in exactly 127 phys segments on a queue that doesn't support SGLs), this memory corruption has been observed by kfence.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 943e942e6266f22babee5efeb00f8f672fbff5bd | affected | git | dfb6d54893d544151e7f480bc44cfe7823f5ad23 | Unavailable | None listed |
| 943e942e6266f22babee5efeb00f8f672fbff5bd | affected | git | 9141144b37f30e3e7fa024bcfa0a13011e546ba9 | Unavailable | None listed |
| 943e942e6266f22babee5efeb00f8f672fbff5bd | affected | git | e1777b4286e526c58b4ee699344b0ad85aaf83a0 | Unavailable | None listed |
| 943e942e6266f22babee5efeb00f8f672fbff5bd | affected | git | b1814724e0d7162bdf4799f2d565381bc2251c63 | Unavailable | None listed |
| 943e942e6266f22babee5efeb00f8f672fbff5bd | affected | git | c89a529e823d51dd23c7ec0c047c7a454a428541 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.18 | Unavailable | None listed |
| 5.10.163 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.87 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.0.17 | unaffected | semver | Unavailable | 6.0.* | None listed |
| 6.1.3 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |