SB2025102377 - Buffer overflow in Linux kernel xen driver
Published: October 23, 2025 Updated: October 26, 2025
Security Bulletin ID
SB2025102377
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Buffer overflow (CVE-ID: CVE-2022-50575)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory corruption within the privcmd_ioctl_mmap_resource() function in drivers/xen/privcmd.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0bf874183b32eae2cc20e3c5be38ec3d33e7e564
- https://git.kernel.org/stable/c/46026bb057c35f5bb111bf95e00cd8366d2e34d4
- https://git.kernel.org/stable/c/4da411086f5ab32f811a89ef804980ec106ebb65
- https://git.kernel.org/stable/c/4f983ee5e5de924d93a7bbb4e6f68f38c6256cd5
- https://git.kernel.org/stable/c/5d68ae32d132ea2af73bc223fd64c46f85302a8b
- https://git.kernel.org/stable/c/8b997b2bb2c53b76a6db6c195930e9ab8e4b0c79
- https://git.kernel.org/stable/c/e0c5f1058ed96f2b7487560c4c4cbd768d13d065
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.16