CVE-2022-50721
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-50721
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50721.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-50721
- Downstream
- Published
- 2025-12-24T12:22:44.080Z
- Modified
- 2025-12-24T20:41:07.864289Z
- Summary
- dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: qcom-adm: fix wrong calling convention for prepslavesg
The calling convention for preslavesg is to return NULL on error and provide an error log to the system. Qcom-adm instead provide error pointer when an error occur. This indirectly cause kernel panic for example for the nandc driver that checks only if the pointer returned by deviceprepslavesg is not NULL. Returning an error pointer makes nandc think the deviceprepslavesg function correctly completed and makes the kernel panics later in the code.
While nandc is the one that makes the kernel crash, it was pointed out that the real problem is qcom-adm not following calling convention for that function.
To fix this, drop returning error pointer and return NULL with an error log.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50721.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/5653bd0200944e5803fa8e32dc36aa49931312f9
- https://git.kernel.org/stable/c/9a041174c58a226e713f6cebd41eccec7a5cfa72
- https://git.kernel.org/stable/c/b9d2140c3badf4107973ad77c5a0ec3075705c85
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50721.json
- https://nvd.nist.gov/vuln/detail/CVE-2022-50721
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5c9f8c2dbdbe53818bcde6aa6695e1331e5f841fFixed5653bd0200944e5803fa8e32dc36aa49931312f9Fixed9a041174c58a226e713f6cebd41eccec7a5cfa72Fixedb9d2140c3badf4107973ad77c5a0ec3075705c85