CVE-2022-50575

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50575
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50575.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-50575
Downstream
Related
Published
2025-10-22T13:23:29.595Z
Modified
2026-04-02T08:28:38.389814Z
Summary
xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
Details

In the Linux kernel, the following vulnerability has been resolved:

xen/privcmd: Fix a possible warning in privcmdioctlmmap_resource()

As 'kdata.num' is user-controlled data, if user tries to allocate memory larger than(>=) MAX_ORDER, then kcalloc() will fail, it creates a stack trace and messes up dmesg with a warning.

Call trace: -> privcmdioctl --> privcmdioctlmmapresource

Add _GFPNOWARN in order to avoid too large allocation warning. This is detected by static analysis using smatch.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50575.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3ad0876554cafa368f574d4d408468510543e9ff
Fixed
5d68ae32d132ea2af73bc223fd64c46f85302a8b
Fixed
4f983ee5e5de924d93a7bbb4e6f68f38c6256cd5
Fixed
46026bb057c35f5bb111bf95e00cd8366d2e34d4
Fixed
0bf874183b32eae2cc20e3c5be38ec3d33e7e564
Fixed
e0c5f1058ed96f2b7487560c4c4cbd768d13d065
Fixed
4da411086f5ab32f811a89ef804980ec106ebb65
Fixed
8b997b2bb2c53b76a6db6c195930e9ab8e4b0c79

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50575.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.18.0
Fixed
4.19.270
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.229
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.163
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.86
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.16
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50575.json"