Riskcovery

CVE-2022-50518

parisc: Fix locking in pdc_iodc_print() firmware call

State
Published
Severity
7.8 High
Published
Oct 7, 2025
Updated
Aug 5, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

parisc: Fix locking in pdc_iodc_print() firmware call

Utilize pdc_lock spinlock to protect parallel modifications of the iodc_dbuf[] buffer, check length to prevent buffer overflow of iodc_dbuf[], drop the iodc_retbuf[] buffer and fix some wrong indentings.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ef1afd4d79f0479960ff36bb5fe6ec6eba1ebff2 to before 04a603058e70b8b881bb7860b8bd649f931f2591Affected
  • ef1afd4d79f0479960ff36bb5fe6ec6eba1ebff2 to before 553bc5890ed96a8d006224c3a4673c47fee0d12aAffected
  • ef1afd4d79f0479960ff36bb5fe6ec6eba1ebff2 to before 7236aae5f81f3efbd93d0601e74fc05994bc2580Affected
  • 24319896af06b84f965bcefa0f2d926b726ed05bAffected
  • 2.6.24.5 to before 2.6.25Affected
LinuxLinux
  • 2.6.25Affected
  • before 2.6.25Not affected
  • 6.0.18 through 6.0.*Not affected
  • 6.1.4 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.