CVE-2022-50271 - vhost/vsock: Use kvmalloc/kvfree for larger packets.

Back Back to CVE browser

MEDIUM

vhost/vsock: Use kvmalloc/kvfree for larger packets.

Published Sep 15, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions.

vhost-5837: page allocation failure: order:4, mode:0x24040c0 Call Trace: [<ffffffffb6a0df64>] dump_stack+0x97/0xdb [<ffffffffb68d6aed>] warn_alloc_failed+0x10f/0x138 [<ffffffffb68d868a>] ? __alloc_pages_direct_compact+0x38/0xc8 [<ffffffffb664619f>] __alloc_pages_nodemask+0x84c/0x90d [<ffffffffb6646e56>] alloc_kmem_pages+0x17/0x19 [<ffffffffb6653a26>] kmalloc_order_trace+0x2b/0xdb [<ffffffffb66682f3>] __kmalloc+0x177/0x1f7 [<ffffffffb66e0d94>] ? copy_from_iter+0x8d/0x31d [<ffffffffc0689ab7>] vhost_vsock_handle_tx_kick+0x1fa/0x301 [vhost_vsock] [<ffffffffc06828d9>] vhost_worker+0xf7/0x157 [vhost] [<ffffffffb683ddce>] kthread+0xfd/0x105 [<ffffffffc06827e2>] ? vhost_dev_set_owner+0x22e/0x22e [vhost] [<ffffffffb683dcd1>] ? flush_kthread_worker+0xf3/0xf3 [<ffffffffb6eb332e>] ret_from_fork+0x4e/0x80 [<ffffffffb683dcd1>] ? flush_kthread_worker+0xf3/0xf3

Work around by doing kvmalloc instead.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.8
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.8
- Version
  4.14.296
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.262
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.150
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.75
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.19.17
  Status
  unaffected
  Constraints
  <=5.19.*
- Version
  5.4.220
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.0.3
  Status
  unaffected
  Constraints
  <=6.0.*
- Version
  6.1
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.8	affected	-
0	unaffected	<4.8
4.14.296	unaffected	<=4.14.*
4.19.262	unaffected	<=4.19.*
5.10.150	unaffected	<=5.10.*
5.15.75	unaffected	<=5.15.*
5.19.17	unaffected	<=5.19.*
5.4.220	unaffected	<=5.4.*
6.0.3	unaffected	<=6.0.*
6.1	unaffected	<=*

Red Hat Enterprise Linux 8

kernel-0:4.18.0-477.10.1.el8_8

Fixed · RHSA-2023:2951
Red Hat Enterprise Linux 9

kernel-0:5.14.0-284.11.1.el9_2

Fixed · RHSA-2023:2458
Red Hat Enterprise Linux 9

kernel-0:5.14.0-284.11.1.el9_2

Fixed · RHSA-2023:2458
Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Fix deferred
Red Hat Enterprise Linux 7

kernel-rt

Fix deferred
Red Hat Enterprise Linux 8

kernel-rt

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	kernel-0:4.18.0-477.10.1.el8_8	Fixed	RHSA-2023:2951
Red Hat Enterprise Linux 9	kernel-0:5.14.0-284.11.1.el9_2	Fixed	RHSA-2023:2458
Red Hat Enterprise Linux 9	kernel-0:5.14.0-284.11.1.el9_2	Fixed	RHSA-2023:2458
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 7	kernel-rt	Fix deferred	n/a
Red Hat Enterprise Linux 8	kernel-rt	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (13)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-50271		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395311		Issue Tracking
https://git.kernel.org/stable/c/0d720c3f0a03e97867deab7e480ba3d3e19837ba		Patch
https://git.kernel.org/stable/c/0e3f72931fc47bb81686020cc643cde5d9cd0bb8		Patch
https://git.kernel.org/stable/c/36c9f340c60413e28f980c0224c4e9d35851526b		Patch
https://git.kernel.org/stable/c/7aac8c63f604e6a6a46560c0f0188cd0332cf320		Patch
https://git.kernel.org/stable/c/a99fc6d818161d6f1ff3307de8bf5237f6cc34d8		Patch
https://git.kernel.org/stable/c/b4a5905fd2ef841cd61e969ea692c213c2e5c1f7		Patch
https://git.kernel.org/stable/c/e28a4e7f0296824c61a81e7fd54ab48bad3e75ad		Patch
https://git.kernel.org/stable/c/e6d0152c95108651f1880c1ddfab47cb9e3e62d0		Patch
https://lore.kernel.org/linux-cve-announce/2025091505-CVE-2022-50271-2175@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50271
https://www.cve.org/CVERecord?id=CVE-2022-50271