CVE-2022-50142None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: intel_th: msu: Fix vmalloced buffers After commit f5ff79fddf0e ("dma-mapping: remove CONFIG_DMA_REMAP") there's a chance of DMA buffer getting allocated via vmalloc(),…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
intel_th: msu: Fix vmalloced buffers
After commit f5ff79fddf0e ("dma-mapping: remove CONFIG_DMA_REMAP") there's a chance of DMA buffer getting allocated via vmalloc(), which messes up the mmapping code:
RIP: msc_mmap_fault [intel_th_msu] Call Trace: <TASK> __do_fault do_fault ...
Fix this by accounting for vmalloc possibility.
Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < b5d924cb4c7b952eaa61622f14427723a78137a3Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 6ae2881c1d1fa0e33f4763b7c786f8ef05a9c828Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 566887bad7ff2297d6b3f9659c702ba075f3d62dLinux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 0ed72c6bc632cbf8d979ac60f982ff84b7bb610aLinux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 4914c50670b6a531e2cb17cd984cc565b4681312Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < ac12ad3ccf6d386e64a9d6a890595a2509d24eddLinux 5.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses