CVE-2022-50320 is a vulnerability in the Linux kernel affecting the ACPI tables, specifically the FPDT (Firmware Performance Data Table) component. It arises when acpi_os_map_memory() is called with an invalid physical address, leading to a kernel oops or stack trace. This issue has been observed on specific hardware, such as the Packard Bell Dot SC, where the FPDT contains physical addresses outside the CPU's supported range. The vulnerability is rated 7.8 HIGH (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating that a local attacker with low privileges can exploit it with low attack complexity. Successful exploitation can lead to high impacts on confidentiality, integrity, and availability, effectively causing a denial of service or potentially arbitrary code execution due to the kernel crash. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability also lacks significant community discussion or media coverage, suggesting a low level of public awareness or immediate threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.15.75CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 5.19.17CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.0, < 6.0.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.