cbcvebase.
CVE-2022-50271
published 2025-09-15

CVE-2022-50271: In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure: order:4, mode:0x24040c0 Call Trace: [] dump_stack+0x97/0xdb [] warn_alloc_failed+0x10f/0x138 [] ? __alloc_pages_direct_compact+0x38/0xc8 [] __alloc_pages_nodemask+0x84c/0x90d [] alloc_kmem_pages+0x17/0x19 [] kmalloc_order_trace+0x2b/0xdb [] __kmalloc+0x177/0x1f7 [] ? copy_from_iter+0x8d/0x31d [] vhost_vsock_handle_tx_kick+0x1fa/0x301 [vhost_vsock] [] vhost_worker+0xf7/0x157 [vhost] [] kthread+0xfd/0x105 [] ? vhost_dev_set_owner+0x22e/0x22e [vhost] [] ? flush_kthread_worker+0xf3/0xf3 [] ret_from_fork+0x4e/0x80 [] ? flush_kthread_worker+0xf3/0xf3 Work around by doing kvmalloc instead.

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.0.3-1 (bookworm)linux 6.0.3-1 (bookworm)
linuxlinux——
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < 0d720c3f0a03e97867deab7e480ba3d3e19837ba0d720c3f0a03e97867deab7e480ba3d3e19837ba
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < 7aac8c63f604e6a6a46560c0f0188cd0332cf3207aac8c63f604e6a6a46560c0f0188cd0332cf320
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < e6d0152c95108651f1880c1ddfab47cb9e3e62d0e6d0152c95108651f1880c1ddfab47cb9e3e62d0
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < b4a5905fd2ef841cd61e969ea692c213c2e5c1f7b4a5905fd2ef841cd61e969ea692c213c2e5c1f7
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < e28a4e7f0296824c61a81e7fd54ab48bad3e75ade28a4e7f0296824c61a81e7fd54ab48bad3e75ad
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < a99fc6d818161d6f1ff3307de8bf5237f6cc34d8a99fc6d818161d6f1ff3307de8bf5237f6cc34d8
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < 36c9f340c60413e28f980c0224c4e9d35851526b36c9f340c60413e28f980c0224c4e9d35851526b
linuxlinux>= 433fc58e6bf2c8bd97e57153ed28e64fd78207b8 < 0e3f72931fc47bb81686020cc643cde5d9cd0bb80e3f72931fc47bb81686020cc643cde5d9cd0bb8
linuxlinux_kernel>= 0 < 5.10.158-15.10.158-1
linuxlinux_kernel>= 0 < 6.0.3-16.0.3-1
linuxlinux_kernel>= 0 < 6.0.3-16.0.3-1
linuxlinux_kernel>= 0 < 6.0.3-16.0.3-1
linuxlinux_kernel>= 4.15 < 4.19.2624.19.262
linuxlinux_kernel>= 4.20 < 5.4.2205.4.220
linuxlinux_kernel>= 4.8 < 4.14.2964.14.296
linuxlinux_kernel>= 5.11 < 5.15.755.15.75
linuxlinux_kernel>= 5.16 < 5.19.175.19.17
linuxlinux_kernel>= 5.5 < 5.10.1505.10.150
linuxlinux_kernel>= 6.0 < 6.0.36.0.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.