CVE-2022-50504Use of a Non-reentrant Function in a Concurrent Context in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_delay() to handle a busy status from the ibm,os-term RTAS function in rtas_os_term(): Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG: sleeping function called from invalid context at arch/powerpc/kernel/rtas.c:618 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1, name: swapper/0 preempt_count: 2, expected: 0 CPU:

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel2.6.184.9.337+7
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linux507279db1819aacf4022e790b3fc8bc8cf56debff413135b337c4e90c1e593c6613f8717e17bc724+9
debiandebian/linux< linux 6.1.4-1 (bookworm)

Patches

🔴Vulnerability Details

2
OSV
CVE-2022-50504: In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_dela2025-10-04
GHSA
GHSA-89wp-46hf-77pq: In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_de2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: powerpc/rtas: avoid scheduling in rtas_os_term()2025-10-04
Debian
CVE-2022-50504: linux - In the Linux kernel, the following vulnerability has been resolved: powerpc/rta...2022