CVE-2022-50647
published 2025-12-09CVE-2022-50647: In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as…
PriorityP423
EPSS
0.18%
8.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
RISC-V: Make port I/O string accessors actually work
Fix port I/O string accessors such as `insb', `outsb', etc. which use
the physical PCI port I/O address rather than the corresponding memory
mapping to get at the requested location, which in turn breaks at least
accesses made by our parport driver to a PCIe parallel port such as:
PCI parallel port detected: 1415:c118, I/O at 0x1000(0x1008), IRQ 20
parport0: PC-style at 0x1000 (0x1008), irq 20, using FIFO [PCSPP,TRISTATE,COMPAT,EPP,ECP]
causing a memory access fault:
Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000001008
Oops [#1]
Modules linked in:
CPU: 1 PID: 350 Comm: cat Not tainted 6.0.0-rc2-00283-g10d4879f9ef0-dirty #23
Hardware name: SiFive HiFive Unmatched A00 (DT)
epc : parport_pc_fifo_write_block_pio+0x266/0x416
ra : parport_pc_fifo_write_block_pio+0xb4/0x416
epc : ffffffff80542c3e ra : ffffffff80542a8c sp : ffffffd88899fc60
gp : ffffffff80fa2700 tp : ffffffd882b1e900 t0 : ffffffd883d0b000
t1 : ffffffffff000002 t2 : 4646393043330a38 s0 : ffffffd88899fcf0
s1 : 0000000000001000 a0 : 0000000000000010 a1 : 0000000000000000
a2 : ffffffd883d0a010 a3 : 0000000000000023 a4 : 00000000ffff8fbb
a5 : ffffffd883d0a001 a6 : 0000000100000000 a7 : ffffffc800000000
s2 : ffffffffff000002 s3 : ffffffff80d28880 s4 : ffffffff80fa1f50
s5 : 0000000000001008 s6 : 0000000000000008 s7 : ffffffd883d0a000
s8 : 0004000000000000 s9 : ffffffff80dc1d80 s10: ffffffd8807e4000
s11: 0000000000000000 t3 : 00000000000000ff t4 : 393044410a303930
t5 : 0000000000001000 t6 : 0000000000040000
status: 0000000200000120 badaddr: 0000000000001008 cause: 000000000000000f
[] parport_pc_compat_write_block_pio+0xfe/0x200
[] parport_write+0x46/0xf8
[] lp_write+0x158/0x2d2
[] vfs_write+0x8e/0x2c2
[] ksys_write+0x52/0xc2
[] sys_write+0xe/0x16
[] ret_from_syscall+0x0/0x2
---[ end trace 0000000000000000 ]---
For simplicity address the
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= fab957c11efe2f405e08b9f0d080524bc2631428 < 2c60db6869fe5213471fcf4fe5704dc29da8b5ee | 2c60db6869fe5213471fcf4fe5704dc29da8b5ee |
| linux | linux | >= fab957c11efe2f405e08b9f0d080524bc2631428 < 2ce9fab94b8db61f014e43ddf80dd1524ae6dff4 | 2ce9fab94b8db61f014e43ddf80dd1524ae6dff4 |
| linux | linux | >= fab957c11efe2f405e08b9f0d080524bc2631428 < dc235db7b79a352d07d62e8757ad856dbf1564c1 | dc235db7b79a352d07d62e8757ad856dbf1564c1 |
| linux | linux | >= fab957c11efe2f405e08b9f0d080524bc2631428 < 140b2b92dbefffa7f4f7211a1fd399a6e79e71c4 | 140b2b92dbefffa7f4f7211a1fd399a6e79e71c4 |
| linux | linux | >= fab957c11efe2f405e08b9f0d080524bc2631428 < 1acee4616930fc07265cb8e539753a8062daa8e0 | 1acee4616930fc07265cb8e539753a8062daa8e0 |
| linux | linux | >= fab957c11efe2f405e08b9f0d080524bc2631428 < 9cc205e3c17d5716da7ebb7fa0c985555e95d009 | 9cc205e3c17d5716da7ebb7fa0c985555e95d009 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 4.15.0 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11.0 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16.0 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.20.0 < 6.0.3 | 6.0.3 |
| linux | linux_kernel | >= 5.5.0 < 5.10.150 | 5.10.150 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50647: In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors
osv·2025-12-09
CVE-2022-50647 CVE-2022-50647: In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors
In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as `insb', `outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested location, which in turn breaks at least accesses made by our parport driver to a PCIe parallel port such as: PCI parallel port detected: 1415:c118, I/O at 0x1000(0x1008), IRQ 20 parport0: PC-style at 0x1000 (0x1008), irq 20, using FIFO [PCSPP,TRISTATE,COMPAT,EPP,ECP] causing a memory access fault: Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000001008 Oops [#1] Modules linked in: CPU: 1 PID: 350 Comm: cat Not tainted 6.0.0-rc2-00283-g10d4879f9ef0-dir
OSV
RISC-V: Make port I/O string accessors actually work
osv·2025-12-09
CVE-2022-50647 RISC-V: Make port I/O string accessors actually work
RISC-V: Make port I/O string accessors actually work
In the Linux kernel, the following vulnerability has been resolved:
RISC-V: Make port I/O string accessors actually work
Fix port I/O string accessors such as `insb', `outsb', etc. which use
the physical PCI port I/O address rather than the corresponding memory
mapping to get at the requested location, which in turn breaks at least
accesses made by our parport driver to a PCIe parallel port such as:
PCI parallel port detected: 1415:c118, I/O at 0x1000(0x1008), IRQ 20
parport0: PC-style at 0x1000 (0x1008), irq 20, using FIFO [PCSPP,TRISTATE,COMPAT,EPP,ECP]
causing a memory access fault:
Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000001008
Oops [#1]
Modules linked in:
CPU: 1 PID:
GHSA
GHSA-gvvr-vj5m-jq76: In the Linux kernel, the following vulnerability has been resolved:
RISC-V: Make port I/O string accessors actually work
Fix port I/O string accesso
ghsa_unreviewed·2025-12-09
CVE-2022-50647 GHSA-gvvr-vj5m-jq76: In the Linux kernel, the following vulnerability has been resolved:
RISC-V: Make port I/O string accessors actually work
Fix port I/O string accesso
In the Linux kernel, the following vulnerability has been resolved:
RISC-V: Make port I/O string accessors actually work
Fix port I/O string accessors such as `insb', `outsb', etc. which use
the physical PCI port I/O address rather than the corresponding memory
mapping to get at the requested location, which in turn breaks at least
accesses made by our parport driver to a PCIe parallel port such as:
PCI parallel port detected: 1415:c118, I/O at 0x1000(0x1008), IRQ 20
parport0: PC-style at 0x1000 (0x1008), irq 20, using FIFO [PCSPP,TRISTATE,COMPAT,EPP,ECP]
causing a memory access fault:
Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000001008
Oops [#1]
Modules linked in:
CPU: 1 PID: 350 Comm: cat Not tainted 6.0.0-rc2-00283-g10d4879f9ef
Red Hat
kernel: RISC-V: Make port I/O string accessors actually work
vendor_redhat·2025-12-09
CVE-2022-50647 kernel: RISC-V: Make port I/O string accessors actually work
kernel: RISC-V: Make port I/O string accessors actually work
In the Linux kernel, the following vulnerability has been resolved:
RISC-V: Make port I/O string accessors actually work
Fix port I/O string accessors such as `insb', `outsb', etc. which use
the physical PCI port I/O address rather than the corresponding memory
mapping to get at the requested location, which in turn breaks at least
accesses made by our parport driver to a PCIe parallel port such as:
PCI parallel port detected: 1415:c118, I/O at 0x1000(0x1008), IRQ 20
parport0: PC-style at 0x1000 (0x1008), irq 20, using FIFO [PCSPP,TRISTATE,COMPAT,EPP,ECP]
causing a memory access fault:
Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000001008
Oops [#1]
Modules linked in:
CPU: 1 PI
Debian
CVE-2022-50647: linux - In the Linux kernel, the following vulnerability has been resolved: RISC-V: Mak...
vendor_debian·2022
CVE-2022-50647 CVE-2022-50647: linux - In the Linux kernel, the following vulnerability has been resolved: RISC-V: Mak...
In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as `insb', `outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested location, which in turn breaks at least accesses made by our parport driver to a PCIe parallel port such as: PCI parallel port detected: 1415:c118, I/O at 0x1000(0x1008), IRQ 20 parport0: PC-style at 0x1000 (0x1008), irq 20, using FIFO [PCSPP,TRISTATE,COMPAT,EPP,ECP] causing a memory access fault: Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000001008 Oops [#1] Modules linked in: CPU: 1 PID: 350 Comm: cat Not tainted 6.0.0-rc2-00283-g10d4879f9ef0-dir
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/140b2b92dbefffa7f4f7211a1fd399a6e79e71c4https://git.kernel.org/stable/c/1acee4616930fc07265cb8e539753a8062daa8e0https://git.kernel.org/stable/c/2c60db6869fe5213471fcf4fe5704dc29da8b5eehttps://git.kernel.org/stable/c/2ce9fab94b8db61f014e43ddf80dd1524ae6dff4https://git.kernel.org/stable/c/9cc205e3c17d5716da7ebb7fa0c985555e95d009https://git.kernel.org/stable/c/dc235db7b79a352d07d62e8757ad856dbf1564c1
2025-12-09
Published