In the Linux kernel, the following vulnerability has been resolved:
parisc: Fix locking in pdciodcprint() firmware call
Utilize pdclock spinlock to protect parallel modifications of the iodcdbuf[] buffer, check length to prevent buffer overflow of iodcdbuf[], drop the iodcretbuf[] buffer and fix some wrong indentings.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50518.json"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50518.json"
[
{
"id": "CVE-2022-50518-0819d7ab",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"249476202305553938966173368431695246908",
"230825772936279640279268311052569885631",
"297056283368581036608919348786287625674",
"211570588022846714155571138185116143716",
"186747126588958555711146124951847686598",
"142245499230410638136165145667681394376",
"29369913674484827870971205455366098955",
"120639436453040670083580973814703251245",
"143813616177669351801798136572236859188",
"92761312512188956447558472367027969000",
"179088463886625017104408249564584995188",
"100948673393582029905923842436423916153",
"154445224552899047736622465662313927630",
"169573735455381901310789496048365459095",
"19214393017961813209691036025246179298",
"129187290252826164039852858287044282663",
"86427268287900819352350888085912845270",
"56729958633643625078555921092047145332",
"57837385237155731641658495823374881283",
"233256298059678085936107458572344221524",
"115921391761274982541615467616550860663",
"149261534620039042320053420847661955486",
"66477427587772535950349470294774238838"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7236aae5f81f3efbd93d0601e74fc05994bc2580",
"deprecated": false
},
{
"id": "CVE-2022-50518-14b714a5",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c",
"function": "pdc_iodc_getc"
},
"digest": {
"function_hash": "161214810146849028434809895063513618562",
"length": 504.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@553bc5890ed96a8d006224c3a4673c47fee0d12a",
"deprecated": false
},
{
"id": "CVE-2022-50518-1ee0f398",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c",
"function": "pdc_iodc_getc"
},
"digest": {
"function_hash": "161214810146849028434809895063513618562",
"length": 504.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7236aae5f81f3efbd93d0601e74fc05994bc2580",
"deprecated": false
},
{
"id": "CVE-2022-50518-6a2eda0e",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"249476202305553938966173368431695246908",
"230825772936279640279268311052569885631",
"297056283368581036608919348786287625674",
"211570588022846714155571138185116143716",
"186747126588958555711146124951847686598",
"142245499230410638136165145667681394376",
"29369913674484827870971205455366098955",
"120639436453040670083580973814703251245",
"143813616177669351801798136572236859188",
"92761312512188956447558472367027969000",
"179088463886625017104408249564584995188",
"100948673393582029905923842436423916153",
"154445224552899047736622465662313927630",
"169573735455381901310789496048365459095",
"19214393017961813209691036025246179298",
"129187290252826164039852858287044282663",
"86427268287900819352350888085912845270",
"56729958633643625078555921092047145332",
"57837385237155731641658495823374881283",
"233256298059678085936107458572344221524",
"115921391761274982541615467616550860663",
"149261534620039042320053420847661955486",
"66477427587772535950349470294774238838"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@04a603058e70b8b881bb7860b8bd649f931f2591",
"deprecated": false
},
{
"id": "CVE-2022-50518-a1a4d0e1",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c",
"function": "pdc_iodc_getc"
},
"digest": {
"function_hash": "161214810146849028434809895063513618562",
"length": 504.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@04a603058e70b8b881bb7860b8bd649f931f2591",
"deprecated": false
},
{
"id": "CVE-2022-50518-af835957",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c",
"function": "pdc_iodc_print"
},
"digest": {
"function_hash": "2945312894828315993880825242538661274",
"length": 670.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@04a603058e70b8b881bb7860b8bd649f931f2591",
"deprecated": false
},
{
"id": "CVE-2022-50518-b2a67639",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"249476202305553938966173368431695246908",
"230825772936279640279268311052569885631",
"297056283368581036608919348786287625674",
"211570588022846714155571138185116143716",
"186747126588958555711146124951847686598",
"142245499230410638136165145667681394376",
"29369913674484827870971205455366098955",
"120639436453040670083580973814703251245",
"143813616177669351801798136572236859188",
"92761312512188956447558472367027969000",
"179088463886625017104408249564584995188",
"100948673393582029905923842436423916153",
"154445224552899047736622465662313927630",
"169573735455381901310789496048365459095",
"19214393017961813209691036025246179298",
"129187290252826164039852858287044282663",
"86427268287900819352350888085912845270",
"56729958633643625078555921092047145332",
"57837385237155731641658495823374881283",
"233256298059678085936107458572344221524",
"115921391761274982541615467616550860663",
"149261534620039042320053420847661955486",
"66477427587772535950349470294774238838"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@553bc5890ed96a8d006224c3a4673c47fee0d12a",
"deprecated": false
},
{
"id": "CVE-2022-50518-ba54e5a3",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c",
"function": "pdc_iodc_print"
},
"digest": {
"function_hash": "2945312894828315993880825242538661274",
"length": 670.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@553bc5890ed96a8d006224c3a4673c47fee0d12a",
"deprecated": false
},
{
"id": "CVE-2022-50518-c1160eb8",
"signature_version": "v1",
"target": {
"file": "arch/parisc/kernel/firmware.c",
"function": "pdc_iodc_print"
},
"digest": {
"function_hash": "2945312894828315993880825242538661274",
"length": 670.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7236aae5f81f3efbd93d0601e74fc05994bc2580",
"deprecated": false
}
]