CVE-2022-50636 — Insufficient Control Flow Management in Linux
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 85.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix pci_device_is_present() for VFs by checking PF
pci_device_is_present() previously didn't work for VFs because it reads the
Vendor and Device ID, which are 0xffff for VFs, which looks like they
aren't present. Check the PF instead.
Wei Gong reported that if virtio I/O is in progress when the driver is
unbound or "0" is written to /sys/.../sriov_numvfs, the virtio I/O
operation hangs, which may result in output like th…
Affected Packages4 packages
▶CVEListV5linux/linux8496e85c20e7836b3dec97780e40f420a3ae2801 — f4b44c7766dae2b8681f621941cabe9f14066d59+8
🔴Vulnerability Details
3GHSA▶
GHSA-m8h5-vf45-h85r: In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix pci_device_is_present() for VFs by checking PF
pci_device_is_present()↗2025-12-09
OSV▶
CVE-2022-50636: In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_device_is_present() for VFs by checking PF pci_device_is_present() pr↗2025-12-09