CVE-2022-50028

gadgetfs: ep_io - wait until IRQ finishes

State: Published
Severity: 7.8 High
Published: Jun 18, 2025
Updated: Aug 5, 2026
Reserved: Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gadgetfs: ep_io - wait until IRQ finishes

after usb_ep_queue() if wait_for_completion_interruptible() is interrupted we need to wait until IRQ gets finished.

Otherwise complete() from epio_complete() can corrupt stack.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67a4874461422e633236a0286a01b483cd647113Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 118d967ce00a3d128bf731b35e4e2cb0facf5f00Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 77040efe59a141286d090c8a0d37c65a355a1832Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ca06b4cde54f8ec8be3aa53fd339bd56e62c12b3Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9ac14f973cb91f0c01776517e6d50981f32b8038Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 94aadba8d000d5de56af4ce8da3f334f21bf7a79Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2b06d5d97c0e067108a122986767731d40742138Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 04cb742d4d8f30dc2e83b46ac317eec09191c68eAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.9.326 through 4.9.Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.138 through 5.10.Not affected 5.15.63 through 5.15.Not affected 5.19.4 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 67a4874461422e633236a0286a01b483cd647113Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 118d967ce00a3d128bf731b35e4e2cb0facf5f00Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 77040efe59a141286d090c8a0d37c65a355a1832Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ca06b4cde54f8ec8be3aa53fd339bd56e62c12b3Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9ac14f973cb91f0c01776517e6d50981f32b8038Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 94aadba8d000d5de56af4ce8da3f334f21bf7a79Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2b06d5d97c0e067108a122986767731d40742138Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 04cb742d4d8f30dc2e83b46ac317eec09191c68eAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.9.326 through 4.9.*Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.138 through 5.10.*Not affected
5.15.63 through 5.15.*Not affected
5.19.4 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.