dmaengine: qcom-adm: fix wrong sizeof config in slave_config
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong sizeof config in slave_config Fix broken slave_config function that uncorrectly compare the peripheral_size with the size of the config pointer instead of the size of the config struct. This cause the crci value to be ignored and cause a kernel panic on any slave that use adm driver. To fix this, compare to the size of the struct and NOT the size of the pointer.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.19.17, 6.0.3
- CVEs
- CVE-2022-50540
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 00:59 UTC · Revision 1
Source evidence
dmaengine: qcom-adm: fix wrong sizeof config in slave_config
core-osv · Original sourcePublished 7 Oct 2025, 15:21 UTC
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong sizeof config in slave_config Fix broken slave_config function that uncorrectly compare the peripheral_size with the size of the config pointer instead of the size of the config struct. This cause the crci value to be ignored and cause a kernel panic on any slave that use adm driver. To fix this, compare to the size of the struct and NOT the size of the pointer.
osv:CVE-2022-50540
Kernel
Fixed versions: 5.19.17, 6.0.3
Complete source record
{
"id": "5e6e768f1476aac9d2ffdc3bb22b44eec039419801c5dda31e8b0f7191fe5476",
"url": "https://osv.dev/vulnerability/CVE-2022-50540",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "dmaengine: qcom-adm: fix wrong sizeof config in slave_config",
"summary": "In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong sizeof config in slave_config Fix broken slave_config function that uncorrectly compare the peripheral_size with the size of the config pointer instead of the size of the config struct. This cause the crci value to be ignored and cause a kernel panic on any slave that use adm driver. To fix this, compare to the size of the struct and NOT the size of the pointer.",
"evidence": "osv:CVE-2022-50540",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.19.17",
"evidence": "/affected/1/ranges"
},
{
"value": "6.0.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2022-50540",
"aliases": [
"CVE-2022-50540"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "03de6b273805b3c552ff158f8688555937375926"
},
{
"fixed": "f1dd45a6585a1689e1e8906b3f9e302b9d40c715"
},
{
"fixed": "7490274b41a432824f7df5071ace3df2ab59caa7"
},
{
"fixed": "7c8765308371be30f50c1b5b97618b731514b207"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50540.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.17.0"
},
{
"fixed": "5.19.17"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.20.0"
},
{
"fixed": "6.0.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50540.json"
}
}
],
"modified": "2026-10-28T02:30:41.282846132Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/7490274b41a432824f7df5071ace3df2ab59caa7",
"https://git.kernel.org/stable/c/7c8765308371be30f50c1b5b97618b731514b207",
"https://git.kernel.org/stable/c/f1dd45a6585a1689e1e8906b3f9e302b9d40c715",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50540.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50540",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50540.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50540",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 508830,
"published_at": "2025-10-07T15:21:05.836+00:00"
}