CVE-2022-50239 cpufreq: qcom: fix writes in read-only memory region

🗓️ 15 Sep 2025 14:01:43Reported by LinuxType

Fix kernel oops from writing to read-only memory in qcom cpufreq by using a stack buffer for the template.

Reporter	Title	Published	Views	Family All 59
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the qcom_cpufreq_probe() function in the drivers/cpufreq/qcom-cpufreq-nvmem.c file of the Linux kernel’s CPU frequency scaling driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	29 Apr 202600:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	15 Sep 202500:00	–	cnnvd
CVE	CVE-2022-50239	15 Sep 202514:01	–	cve
Debian CVE	CVE-2022-50239	15 Sep 202514:01	–	debiancve
EUVD	EUVD-2022-55513	3 Oct 202520:07	–	euvd
NVD	CVE-2022-50239	15 Sep 202514:15	–	nvd
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:03615-1)	20 Oct 202500:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:03628-1)	20 Oct 202500:00	–	openvas
OSV	CVE-2022-50239 cpufreq: qcom: fix writes in read-only memory region	15 Sep 202514:01	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/cpufreq/qcom-cpufreq-nvmem.c"
    ],
    "versions": [
      {
        "version": "a8811ec764f95a04ba82f6f457e28c5e9e36e36b",
        "lessThan": "794ded0bc461287a268bed21fea2eebb6e5d232c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a8811ec764f95a04ba82f6f457e28c5e9e36e36b",
        "lessThan": "14d260f94ff89543597ffea13db8b277a810e08e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a8811ec764f95a04ba82f6f457e28c5e9e36e36b",
        "lessThan": "b74ee4e301ca01e431e240c046173332966e2431",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a8811ec764f95a04ba82f6f457e28c5e9e36e36b",
        "lessThan": "01039fb8e90c9cb684430414bff70cea9eb168c5",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/cpufreq/qcom-cpufreq-nvmem.c"
    ],
    "versions": [
      {
        "version": "5.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.7",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.152",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.76",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.0.6",
        "lessThanOrEqual": "6.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/01039fb8e90c9cb684430414bff70cea9eb168c5
git	www.git.kernel.org/stable/c/b74ee4e301ca01e431e240c046173332966e2431
git	www.git.kernel.org/stable/c/14d260f94ff89543597ffea13db8b277a810e08e
git	www.git.kernel.org/stable/c/794ded0bc461287a268bed21fea2eebb6e5d232c

11 May 2026 19:15Current

EPSS0.00148