CVE-2022-50055

iavf: Fix adminq error handling

Description

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavf_alloc_asq_bufs/iavf_alloc_arq_bufs allocates with dma_alloc_coherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ in case error happens during configuration of ASQ/ARQ registers. Without this change it is possible to see when unloading interface: 74626.583369: dma_debug_device_change: device driver has pending DMA allocations while released from device [count=32] One of leaked entries details: [device address=0x0000000b27ff9000] [size=4096 bytes] [mapped with DMA_BIDIRECTIONAL] [mapped as coherent]

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/ff289f2be5899efd0e897d2b434a78e36df2c69b
https://git.kernel.org/stable/c/4fe80492d53971d9a49f39f3c86d2d67c6f3638a
https://git.kernel.org/stable/c/dab6b551f5ba4c79a0dd4970dd8533c37a7b100f
https://git.kernel.org/stable/c/35c63581fdefdcbaeae8cded18908523252353ad
https://git.kernel.org/stable/c/419831617ed349992c84344dbd9e627f9e68f842

Frequently Asked Questions

What is the severity of CVE-2022-50055?: CVE-2022-50055 has not yet been assigned a CVSS score.
How to fix CVE-2022-50055?: To fix CVE-2022-50055, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-50055 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-50055 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-50055?: CVE-2022-50055 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.