CVE-2022-50325
published 2025-09-15CVE-2022-50325: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.17%
6.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix potential RX buffer overflow
If an event caused firmware to return invalid RX size for
LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes.
Fix by utilizing min_t().
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= f14a1c5a9f830025dc8638303ddefd5f731ae4bc < ec1f0c12cb2e614c3fa8e9402f7ffcf82166078a | ec1f0c12cb2e614c3fa8e9402f7ffcf82166078a |
| linux | linux | >= f14a1c5a9f830025dc8638303ddefd5f731ae4bc < 0bad12fee5ae16ab439d97c66c4238f5f4cc7f68 | 0bad12fee5ae16ab439d97c66c4238f5f4cc7f68 |
| linux | linux | >= f14a1c5a9f830025dc8638303ddefd5f731ae4bc < 23ae34e033b2c0e5e88237af82b163b296fd6aa9 | 23ae34e033b2c0e5e88237af82b163b296fd6aa9 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 5.18 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 6.1 < 6.1.2 | 6.1.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ASoC: Intel: avs: Fix potential RX buffer overflow
vendor_redhat·2025-09-15·CVSS 7.8
CVE-2022-50325 [HIGH] CWE-120 kernel: ASoC: Intel: avs: Fix potential RX buffer overflow
kernel: ASoC: Intel: avs: Fix potential RX buffer overflow
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix potential RX buffer overflow
If an event caused firmware to return invalid RX size for
LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes.
Fix by utilizing min_t().
Statement: Please note that this vulnerability only impacts two unsupported streams, RHEL-8.7 and RHEL-9.1.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux
Debian
CVE-2022-50325: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel...
vendor_debian·2022·CVSS 7.8
CVE-2022-50325 [HIGH] CVE-2022-50325: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel...
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes. Fix by utilizing min_t().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
OSV
CVE-2022-50325: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to
osv·2025-09-15·CVSS 7.8
CVE-2022-50325 [HIGH] CVE-2022-50325: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes. Fix by utilizing min_t().
GHSA
GHSA-657p-3q52-qcrv: In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix potential RX buffer overflow
If an event caused firmware t
ghsa_unreviewed·2025-09-15
CVE-2022-50325 [HIGH] CWE-787 GHSA-657p-3q52-qcrv: In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix potential RX buffer overflow
If an event caused firmware t
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix potential RX buffer overflow
If an event caused firmware to return invalid RX size for
LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes.
Fix by utilizing min_t().
No detection rules found.
No public exploits indexed.
2025-09-15
Published