CVE-2022-50657
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: riscv: mm: add missing memcpy in kasan_init Hi Atish, It seems that the panic is due to the missing memcpy during kasan_init. Could you please check whether this patch is helpful? When doing kasan_populate, the new allocated base_pud/base_p4d should contain kasan_early_shadow_{pud, p4d}'s content. Add the missing memcpy to avoid page fault when read/write kasan shadow region. Tested on: - qemu with sv57 and CONFIG_KASAN on. - qemu with sv48 and CONFIG_KASAN on.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 9, 2025
First seenDec 9, 2025
How to fix
Update
- Linux Linuxff0f6becf3a6f817838b6f80a2c9cca43dce0576, 9f2ac64d6ca60db99132e08628ac2899f956a0ec or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8fbdccd2b17335e1881a23865e98c63fcc345938 ≤ v < ff0f6becf3a6f817838b6f80a2c9cca43dce0576, 8fbdccd2b17335e1881a23865e98c63fcc345938 ≤ v < 9f2ac64d6ca60db99132e08628ac2899f956a0ec, 5.18 | ff0f6becf3a6f817838b6f80a2c9cca43dce0576, 9f2ac64d6ca60db99132e08628ac2899f956a0ec |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.