---
id: CVE-2022-50142
title: 'intel_th: msu: Fix vmalloced buffers'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  intel_th: msu: Fix vmalloced buffers

  After commit f5ff79fddf0e ("dma-mapping: remove CONFIG_DMA_REMAP") there's
  a chance of DMA buffer getting allocated via vmalloc(),…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 <
    b5d924cb4c7b952eaa61622f14427723a78137a3
  - >-
    Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 <
    6ae2881c1d1fa0e33f4763b7c786f8ef05a9c828
  - >-
    Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 <
    566887bad7ff2297d6b3f9659c702ba075f3d62d
  - >-
    Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 <
    0ed72c6bc632cbf8d979ac60f982ff84b7bb610a
  - >-
    Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 <
    4914c50670b6a531e2cb17cd984cc565b4681312
  - >-
    Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 <
    ac12ad3ccf6d386e64a9d6a890595a2509d24edd
  - Linux 5.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T19:55:09.763418Z'
published: '2025-06-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:00:18.507Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50142'
references:
  - url: 'https://git.kernel.org/stable/c/b5d924cb4c7b952eaa61622f14427723a78137a3'
  - url: 'https://git.kernel.org/stable/c/6ae2881c1d1fa0e33f4763b7c786f8ef05a9c828'
  - url: 'https://git.kernel.org/stable/c/566887bad7ff2297d6b3f9659c702ba075f3d62d'
  - url: 'https://git.kernel.org/stable/c/0ed72c6bc632cbf8d979ac60f982ff84b7bb610a'
  - url: 'https://git.kernel.org/stable/c/4914c50670b6a531e2cb17cd984cc565b4681312'
  - url: 'https://git.kernel.org/stable/c/ac12ad3ccf6d386e64a9d6a890595a2509d24edd'
tags:
  - cve.org
epss: 0.00204
epssPercentile: 0.10489
ingestedAt: '2026-11-05T22:38:31.686Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

intel_th: msu: Fix vmalloced buffers

After commit f5ff79fddf0e ("dma-mapping: remove CONFIG_DMA_REMAP") there's
a chance of DMA buffer getting allocated via vmalloc(), which messes up
the mmapping code:

> RIP: msc_mmap_fault [intel_th_msu]
> Call Trace:
>  <TASK>
>  __do_fault
>  do_fault
...

Fix this by accounting for vmalloc possibility.

## Affected

- `Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < b5d924cb4c7b952eaa61622f14427723a78137a3`
- `Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 6ae2881c1d1fa0e33f4763b7c786f8ef05a9c828`
- `Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 566887bad7ff2297d6b3f9659c702ba075f3d62d`
- `Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 0ed72c6bc632cbf8d979ac60f982ff84b7bb610a`
- `Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < 4914c50670b6a531e2cb17cd984cc565b4681312`
- `Linux >= ba39bd8306057fb343dfb75d93a76d824b625236 < ac12ad3ccf6d386e64a9d6a890595a2509d24edd`
- `Linux 5.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.