---
id: CVE-2022-50540
title: 'dmaengine: qcom-adm: fix wrong sizeof config in slave_config'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dmaengine: qcom-adm: fix wrong sizeof config in slave_config

  Fix broken slave_config function that uncorrectly compare the
  peripheral_size with the size of the config …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 03de6b273805b3c552ff158f8688555937375926 <
    f1dd45a6585a1689e1e8906b3f9e302b9d40c715
  - >-
    Linux >= 03de6b273805b3c552ff158f8688555937375926 <
    7490274b41a432824f7df5071ace3df2ab59caa7
  - >-
    Linux >= 03de6b273805b3c552ff158f8688555937375926 <
    7c8765308371be30f50c1b5b97618b731514b207
  - Linux 5.17
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:13:26.445725Z'
published: '2025-10-07'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:20:51.483Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50540'
references:
  - url: 'https://git.kernel.org/stable/c/f1dd45a6585a1689e1e8906b3f9e302b9d40c715'
  - url: 'https://git.kernel.org/stable/c/7490274b41a432824f7df5071ace3df2ab59caa7'
  - url: 'https://git.kernel.org/stable/c/7c8765308371be30f50c1b5b97618b731514b207'
tags:
  - cve.org
epss: 0.00157
epssPercentile: 0.0491
ingestedAt: '2026-11-05T22:38:31.747Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: qcom-adm: fix wrong sizeof config in slave_config

Fix broken slave_config function that uncorrectly compare the
peripheral_size with the size of the config pointer instead of the size
of the config struct. This cause the crci value to be ignored and cause
a kernel panic on any slave that use adm driver.

To fix this, compare to the size of the struct and NOT the size of the
pointer.

## Affected

- `Linux >= 03de6b273805b3c552ff158f8688555937375926 < f1dd45a6585a1689e1e8906b3f9e302b9d40c715`
- `Linux >= 03de6b273805b3c552ff158f8688555937375926 < 7490274b41a432824f7df5071ace3df2ab59caa7`
- `Linux >= 03de6b273805b3c552ff158f8688555937375926 < 7c8765308371be30f50c1b5b97618b731514b207`
- `Linux 5.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
