CVE-2022-50570

platform/chrome: fix memory corruption in ioctl

State: Published
Severity: 7.8 High
Published: Oct 22, 2025
Updated: Aug 5, 2026
Reserved: Oct 22, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: fix memory corruption in ioctl

If "s_mem.bytes" is larger than the buffer size it leads to memory corruption.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	eda2e30c6684d67288edb841c6125d48c608a242 to before e548f9503c4b3292a60a63fe77dccea62999a35aAffected eda2e30c6684d67288edb841c6125d48c608a242 to before 868fc93b615b9f6c2b0b1894536618fa6cd66accAffected eda2e30c6684d67288edb841c6125d48c608a242 to before fd1d3b265784a2243fcaef06aebfb2f8ee733cecAffected eda2e30c6684d67288edb841c6125d48c608a242 to before f143f1d9a8e5c6c9db3de81ca270191226fcce36Affected eda2e30c6684d67288edb841c6125d48c608a242 to before 0c2e18924504208644d18415667895a4ac54cf2aAffected eda2e30c6684d67288edb841c6125d48c608a242 to before 8a07b45fd3c2dda24fad43639be5335a4595196aAffected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.220 through 5.4.Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

eda2e30c6684d67288edb841c6125d48c608a242 to before e548f9503c4b3292a60a63fe77dccea62999a35aAffected
eda2e30c6684d67288edb841c6125d48c608a242 to before 868fc93b615b9f6c2b0b1894536618fa6cd66accAffected
eda2e30c6684d67288edb841c6125d48c608a242 to before fd1d3b265784a2243fcaef06aebfb2f8ee733cecAffected
eda2e30c6684d67288edb841c6125d48c608a242 to before f143f1d9a8e5c6c9db3de81ca270191226fcce36Affected
eda2e30c6684d67288edb841c6125d48c608a242 to before 0c2e18924504208644d18415667895a4ac54cf2aAffected
eda2e30c6684d67288edb841c6125d48c608a242 to before 8a07b45fd3c2dda24fad43639be5335a4595196aAffected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.220 through 5.4.*Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.