CVE-2022-50728 — Function Call with Incorrectly Specified Arguments in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/lcs: Fix return type of lcs_start_xmit()
With clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG),
indirect call targets are validated against the expected function
pointer prototype to make sure the call target is valid to help mitigate
ROP attacks. If they are not identical, there is a failure at run time,
which manifests as either a kernel panic or thread getting killed. A
proposed warning in clang aims to c…
Affected Packages4 packages
▶CVEListV5linux/linuxdc1f8bf68b311b1537cb65893430b6796118498a — 7b4da3fcd513b8e67823eb80da37aad99b3339c1+9
🔴Vulnerability Details
3OSV▶
CVE-2022-50728: In the Linux kernel, the following vulnerability has been resolved: s390/lcs: Fix return type of lcs_start_xmit() With clang's kernel control flow int↗2025-12-24
GHSA▶
GHSA-fq4q-h53f-3wjv: In the Linux kernel, the following vulnerability has been resolved:
s390/lcs: Fix return type of lcs_start_xmit()
With clang's kernel control flow i↗2025-12-24