CVE-2022-50271: vhost/vsock: Use kvmalloc/kvfree for larger packets.
Vulnerability summary
CVE-2022-50271 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.1% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 9 · Related 7Timeline
- 15-09-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure: order:4, mode:0x24040c0 Call Trace: [<ffffffffb6a0df64>] dump_stack+0x97/0xdb [<ffffffffb68d6aed>] warn_alloc_failed+0x10f/0x138 [<ffffffffb68d868a>] ? __alloc_pages_direct_compact+0x38/0xc8 [<ffffffffb664619f>] __alloc_pages_nodemask+0x84c/0x90d [<ffffffffb6646e56>] alloc_kmem_pages+0x17/0x19 [<ffffffffb6653a26>] kmalloc_order_trace+0x2b/0xdb [<ffffffffb66682f3>] __kmalloc+0x177/0x1f7 [<ffffffffb66e0d94>] ? copy_from_iter+0x8d/0x31d [<ffffffffc0689ab7>] vhost_vsock_handle_tx_kick+0x1fa/0x301 [vhost_vsock] [<ffffffffc06828d9>] vhost_worker+0xf7/0x157 [vhost] [<ffffffffb683ddce>] kthread+0xfd/0x105 [<ffffffffc06827e2>] ? vhost_dev_set_owner+0x22e/0x22e [vhost] [<ffffffffb683dcd1>] ? flush_kthread_worker+0xf3/0xf3 [<ffffffffb6eb332e>] ret_from_fork+0x4e/0x80 [<ffffffffb683dcd1>] ? flush_kthread_worker+0xf3/0xf3 Work around by doing kvmalloc instead.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.16% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu118 products
- linux< 4.15.0-204.215 | < 5.4.0-139.156 | < 5.15.0-60.66
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 4.15.0-1150.163 | < 5.4.0-1096.104 | < 5.15.0-1030.34
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < 0d720c3f0a03e97867deab7e480ba3d3e19837ba | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < 7aac8c63f604e6a6a46560c0f0188cd0332cf320 | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < e6d0152c95108651f1880c1ddfab47cb9e3e62d0 | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < b4a5905fd2ef841cd61e969ea692c213c2e5c1f7 | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < e28a4e7f0296824c61a81e7fd54ab48bad3e75ad | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < a99fc6d818161d6f1ff3307de8bf5237f6cc34d8 | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < 36c9f340c60413e28f980c0224c4e9d35851526b | ≥ 433fc58e6bf2c8bd97e57153ed28e64fd78207b8, < 0e3f72931fc47bb81686020cc643cde5d9cd0bb8 | 4.8
- linux_kernel≥ 4.8, < 4.14.296 | ≥ 4.15, < 4.19.262 | ≥ 4.20, < 5.4.220 | ≥ 5.5, < 5.10.150 | ≥ 5.11, < 5.15.75 | ≥ 5.16, < 5.19.17 | ≥ 6.0, < 6.0.3
Debian1 product
- linux< 6.0.3-1
3 vendors · 121 products
