CVE-2022-50245
published 2025-09-15CVE-2022-50245: In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.16%
5.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible UAF when kfifo_alloc() fails
If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free
priv. But priv is still in the chdev->file_list, then list traversal
may cause UAF. This fixes the following smatch warning:
drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 2a6c75adf8192f07ddcdd4a1a13488c890a73919 | 2a6c75adf8192f07ddcdd4a1a13488c890a73919 |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 2dfd60724d271a6ab99f93f40f38f2ced1ddbb87 | 2dfd60724d271a6ab99f93f40f38f2ced1ddbb87 |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < a253dde0403a153075ffb254f6f7b2635e49e97a | a253dde0403a153075ffb254f6f7b2635e49e97a |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 311b488405ac45af46756b1c8f1d27007b68b07e | 311b488405ac45af46756b1c8f1d27007b68b07e |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 5ee850645e42f541ce1ea8130c2b27cc495f965c | 5ee850645e42f541ce1ea8130c2b27cc495f965c |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 2f5cc7fd73fd6253cc71214f0dd499cc62feb469 | 2f5cc7fd73fd6253cc71214f0dd499cc62feb469 |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 2ba06e57f933f0eac242e8b389433da1cc00d4d5 | 2ba06e57f933f0eac242e8b389433da1cc00d4d5 |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < cb87af2c19c0993f6e21f75b963a5599c5a73e76 | cb87af2c19c0993f6e21f75b963a5599c5a73e76 |
| linux | linux | >= e8de370188d098bb49483c287b44925957c3c9b6 < 02d7d89f816951e0862147d751b1150d67aaebdd | 02d7d89f816951e0862147d751b1150d67aaebdd |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 4.10 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 4.6 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 5.11 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50245: In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport
osv·2025-09-15·CVSS 7.8
CVE-2022-50245 [HIGH] CVE-2022-50245: In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport
In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free priv. But priv is still in the chdev->file_list, then list traversal may cause UAF. This fixes the following smatch warning: drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
GHSA
GHSA-v4vx-qxh4-8ww4: In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible UAF when kfifo_alloc() fails
If kfifo_alloc() fails in mpo
ghsa_unreviewed·2025-09-15
CVE-2022-50245 [HIGH] CWE-416 GHSA-v4vx-qxh4-8ww4: In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible UAF when kfifo_alloc() fails
If kfifo_alloc() fails in mpo
In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible UAF when kfifo_alloc() fails
If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free
priv. But priv is still in the chdev->file_list, then list traversal
may cause UAF. This fixes the following smatch warning:
drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Red Hat
kernel: rapidio: fix possible UAF when kfifo_alloc() fails
vendor_redhat·2025-09-15·CVSS 7.8
CVE-2022-50245 [HIGH] kernel: rapidio: fix possible UAF when kfifo_alloc() fails
kernel: rapidio: fix possible UAF when kfifo_alloc() fails
In the Linux kernel, the following vulnerability has been resolved:
rapidio: fix possible UAF when kfifo_alloc() fails
If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free
priv. But priv is still in the chdev->file_list, then list traversal
may cause UAF. This fixes the following smatch warning:
drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package
Debian
CVE-2022-50245: linux - In the Linux kernel, the following vulnerability has been resolved: rapidio: fi...
vendor_debian·2022·CVSS 7.8
CVE-2022-50245 [HIGH] CVE-2022-50245: linux - In the Linux kernel, the following vulnerability has been resolved: rapidio: fi...
In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifo_alloc() fails If kfifo_alloc() fails in mport_cdev_open(), goto err_fifo and just free priv. But priv is still in the chdev->file_list, then list traversal may cause UAF. This fixes the following smatch warning: drivers/rapidio/devices/rio_mport_cdev.c:1930 mport_cdev_open() warn: '&priv->list' not removed from list
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/02d7d89f816951e0862147d751b1150d67aaebddhttps://git.kernel.org/stable/c/2a6c75adf8192f07ddcdd4a1a13488c890a73919https://git.kernel.org/stable/c/2ba06e57f933f0eac242e8b389433da1cc00d4d5https://git.kernel.org/stable/c/2dfd60724d271a6ab99f93f40f38f2ced1ddbb87https://git.kernel.org/stable/c/2f5cc7fd73fd6253cc71214f0dd499cc62feb469https://git.kernel.org/stable/c/311b488405ac45af46756b1c8f1d27007b68b07ehttps://git.kernel.org/stable/c/5ee850645e42f541ce1ea8130c2b27cc495f965chttps://git.kernel.org/stable/c/a253dde0403a153075ffb254f6f7b2635e49e97ahttps://git.kernel.org/stable/c/cb87af2c19c0993f6e21f75b963a5599c5a73e76
2025-09-15
Published