cbcvebase.
CVE-2022-50712
published 2025-12-24

CVE-2022-50712: In the Linux kernel, the following vulnerability has been resolved: devlink: hold region lock when flushing snapshots Netdevsim triggers a splat on reload…

PriorityP420low3.3
EPSS
0.21%
10.8th percentile
In the Linux kernel, the following vulnerability has been resolved: devlink: hold region lock when flushing snapshots Netdevsim triggers a splat on reload, when it destroys regions with snapshots pending: WARNING: CPU: 1 PID: 787 at net/core/devlink.c:6291 devlink_region_snapshot_del+0x12e/0x140 CPU: 1 PID: 787 Comm: devlink Not tainted 6.1.0-07460-g7ae9888d6e1c #580 RIP: 0010:devlink_region_snapshot_del+0x12e/0x140 Call Trace: devl_region_destroy+0x70/0x140 nsim_dev_reload_down+0x2f/0x60 [netdevsim] devlink_reload+0x1f7/0x360 devlink_nl_cmd_reload+0x6ce/0x860 genl_family_rcv_msg_doit.isra.0+0x145/0x1c0 This is the locking assert in devlink_region_snapshot_del(), we're supposed to be holding the region->snapshot_lock here.

Affected

10 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.4-1 (bookworm)linux 6.1.4-1 (bookworm)
linuxlinux
linuxlinux>= 2dec18ad826f52658f7781ee995d236cc449b678 < 49383d4e59bb704341aaa1d51440ccce58270e6149383d4e59bb704341aaa1d51440ccce58270e61
linuxlinux>= 2dec18ad826f52658f7781ee995d236cc449b678 < 6298cab4d80bfdb6fe01fe31fd9f0ba26317fdae6298cab4d80bfdb6fe01fe31fd9f0ba26317fdae
linuxlinux>= 2dec18ad826f52658f7781ee995d236cc449b678 < b4cafb3d2c740f8d1b1234b43ac4a60e5291c960b4cafb3d2c740f8d1b1234b43ac4a60e5291c960
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 0 < 6.1.4-16.1.4-1
linuxlinux_kernel>= 6.0.0 < 6.0.166.0.16
linuxlinux_kernel>= 6.1.0 < 6.1.26.1.2
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.