CVE-2022-50774: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50774 is a DMA transfer direction flaw in the Linux kernel's QAT (Intel Quick Assist Technology) crypto driver (crypto/qat). The vulnerability arises when CONFIG_DMA_API_DEBUG is enabled and crypto self-tests are run with input and output scatter lists pointing to the same memory buffers, causing unsupported overlapping DMA write mappings. It affects the Linux kernel and was publicly disclosed on December 24, 2025. The CVSS v3.1 base score is 7.0 (High), requiring local access with low privileges (Red Hat Advisory, Red Hat Bugzilla).

The root cause is improper DMA buffer mapping in the qat_alg_sgl_to_bufl() function, which incorrectly uses DMA_BIDIRECTIONAL for both input and output scatter lists regardless of whether they overlap (CWE classification relates to incorrect resource use/management). When two distinct scatter lists reference the same physical memory pages, the DMA debug layer (add_dma_entry() in kernel/dma/debug.c) detects and warns about unsupported overlapping write mappings. The fix corrects this by mapping in-place operations (where input and output scatter lists are identical) once with DMA_BIDIRECTIONAL, while non-overlapping operations use DMA_TO_DEVICE for input and DMA_FROM_DEVICE for output; the corresponding qat_alg_free_bufl() function was updated to match. Exploitation requires local access with low privileges and high attack complexity (Red Hat Bugzilla).

Successful exploitation could lead to high impacts on confidentiality, integrity, and availability of the affected system, as reflected in the CVSS score. A low-privileged local attacker could potentially trigger memory mapping conflicts in the kernel's crypto subsystem, potentially leading to unauthorized access to system memory, data corruption, or unexpected system behavior. The scope is limited to the local system (no scope change), but the QAT crypto subsystem's role in accelerating cryptographic operations means exploitation could affect the integrity of cryptographic processing (Red Hat Advisory, Red Hat Bugzilla).

The primary remediation is to update the Linux kernel to a patched version containing the fix for crypto: qat - fix DMA transfer direction; upstream patches are available via the stable kernel tree (commits 1f1ab76e, 426d5bc0, 429348d4, c4c9d9ed). As a temporary workaround, disabling CONFIG_DMA_API_DEBUG in the kernel configuration will suppress the triggering condition, though this reduces DMA debugging capability. SUSE has issued kernel advisories (SUSE-2026-0263, SUSE-2026-0317, SUSE-2026-0411) addressing this CVE. Administrators should also monitor system logs for DMA mapping warnings related to the QAT driver (Red Hat Bugzilla, Linux Security SUSE).

The vulnerability was reported via the upstream Linux CVE announcement mailing list (linux-cve-announce) and tracked by Red Hat's OSIDB system. Detection plugins have been published by Tenable (Nessus plugins 279853, 301595, 302405) and Qualys (plugin 677618), indicating standard vendor response for a medium-severity kernel issue. No notable researcher commentary or significant social media discussion has been observed beyond routine security advisory tracking.