CVE-2022-50657

riscv: mm: add missing memcpy in kasan_init

published December 9, 2025

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

riscv: mm: add missing memcpy in kasan_init

Hi Atish,

It seems that the panic is due to the missing memcpy during kasan_init.

Could you please check whether this patch is helpful?

When doing kasan_populate, the new allocated base_pud/base_p4d should

contain kasan_early_shadow_{pud, p4d}'s content. Add the missing memcpy

to avoid page fault when read/write kasan shadow region.

Tested on:

- qemu with sv57 and CONFIG_KASAN on.

- qemu with sv48 and CONFIG_KASAN on.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Published
2025-12-09T01:29Z
EPSS history
Timeline
  • 09 DEC 01:29Z
    riscv: mm: add missing memcpy in kasan_init
    cvelistv5