CVE-2022-50024: dmaengine: dw-axi-dmac: do not print NULL LLI during error

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-18 · updated 2026-06-17
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: do not print NULL LLI during error During debugging we have seen an issue where axi_chan_dump_lli() is passed a NULL LLI pointer which ends up causing an OOPS due to trying to get fields from it. Simply print NULL LLI and exit to avoid this.

Affected products

Linux kernel: before 5.15.63; from 5.16 before 5.19.4 — fixed in 5.15.63, 5.19.4

How to fix

Upgrade to a fixed version: Linux kernel 5.15.63, 5.19.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/86cb0defe0e275453bc39e856bb523eb425a6537
https://git.kernel.org/stable/c/ad764df73ae5eada265fffc0408404703cbb2b8d
https://git.kernel.org/stable/c/af76e6fdcf92f1a742b788d0dba5edd194267bf9

Get alerted when CVE-2022-50024 or the next vulnerability affects your stack