Panic in Linux Kernel's pci_endpoint_test Module

CVE-2022-50614

What is CVE-2022-50614?

In the Linux Kernel, a vulnerability within the pci_endpoint_test module leads to a system panic when attempting to perform zero-length DMA mappings. This issue was identified primarily on the arm64 architecture, where calls to dma_map_single() do not properly handle cases with a payload length of zero, resulting in an internal error and kernel crash. The fix implemented ensures that the payload length is checked before proceeding with DMA mapping, which mitigates the risk of system instability during operations.

References