Memory Mapping Vulnerability in Packard Bell Dot SC Product by Linux Kernel

CVE-2022-50320

What is CVE-2022-50320?

The Linux kernel has encountered a memory mapping vulnerability affecting the Packard Bell Dot SC, specifically with the FPDT table that contains invalid physical addresses. These addresses, characterized by high bits set outside the CPU's supported range, can trigger errors during calls to acpi_os_map_memory(). The flaw can result in a warning notification (WARN_ON), leading to a system oops and stack trace. A patch has been introduced to add verification of physical addresses prior to executing the memory mapping function, effectively preventing erratic behaviors and enhancing system stability.

References