CVE-2022-50024
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-50024 affects the Linux kernel's DMA engine component, specifically the dw-axi-dmac driver. The vulnerability was discovered when the axichandump_lli() function was found to handle NULL LLI (Linked List Item) pointers incorrectly (NVD, Debian Tracker).

Technical details

The vulnerability exists in the dmaengine subsystem of the Linux kernel, specifically in the Synopsys DesignWare AXI DMA controller driver. During debugging, it was discovered that when the axichandump_lli() function receives a NULL LLI pointer, it attempts to access fields from it instead of properly handling the null case, resulting in a kernel OOPS condition (Wiz).

Impact

When triggered, this vulnerability causes a kernel OOPS, which can lead to system instability and potential denial of service conditions in affected Linux systems (Wiz).

Mitigation and workarounds

The issue has been fixed by modifying the code to properly handle NULL LLI pointers by printing 'NULL LLI' and exiting the function when such cases are encountered. Various Linux distributions have released patches to address this vulnerability, with fixed versions available in newer kernel releases (Debian Tracker).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40258HIGH7
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-devel-matched
NoNoDec 04, 2025
CVE-2025-40259MEDIUM6.2
  • Linux KernelLinux Kernel
  • kernel-64k-devel
NoNoDec 04, 2025
CVE-2025-40264MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-kvm
NoNoDec 04, 2025
CVE-2025-40254MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-modules-partner
NoNoDec 04, 2025
CVE-2025-40253MEDIUM5.5
  • Linux KernelLinux Kernel
  • python3-perf
NoNoDec 04, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management