CVE-2022-50541
kernel: dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 7, 2025
Updated · June 30, 2026
Description
A counter-overflow flaw was found in the Linux kernel Texas Instruments K3 Universal Direct Memory Access (UDMA) driver. During long data transfers exceeding four gigabytes, the hardware byte-count registers could wrap and misreport progress, causing the transfer to hang indefinitely. A local user could use this flaw to cause a denial of service due to a stalled input/output operation.
Statement
The real-time byte counters used for tracking DMA progress were 32-bit values that overflowed during large transfers. The fix subtracts completed bytes after each transaction to prevent counter wrap and maintain accurate progress tracking.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent module ti_k3_udma from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.
CVSS / CWE
CVSS 3.1 · 6.3CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE not specified