What’s Vulnerable › Vulnerabilities

CVE-2022-50518: parisc: Fix locking in pdc_iodc_print() firmware call

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-07 · updated 2026-08-04
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdc_iodc_print() firmware call Utilize pdc_lock spinlock to protect parallel modifications of the iodc_dbuf[] buffer, check length to prevent buffer overflow of iodc_dbuf[], drop the iodc_retbuf[] buffer and fix some wrong indentings.

Affected products

• Linux kernel: from 2.6.24.5 before 2.6.25; from 2.6.25.1 before 6.0.18; from 6.1 before 6.1.4; 2.6.25, 2.6.25-rc6, 2.6.25-rc7, 2.6.25-rc8, 2.6.25-rc9 — fixed in 2.6.25, 6.0.18, 6.1.4

How to fix

Upgrade to a fixed version: Linux kernel 2.6.25, 6.0.18, 6.1.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/04a603058e70b8b881bb7860b8bd649f931f2591
• https://git.kernel.org/stable/c/553bc5890ed96a8d006224c3a4673c47fee0d12a
• https://git.kernel.org/stable/c/7236aae5f81f3efbd93d0601e74fc05994bc2580

Get alerted when CVE-2022-50518 or the next vulnerability affects your stack