CVE-2022-50206

Source
https://cve.org/CVERecord?id=CVE-2022-50206
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50206.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50206
Downstream
Related
Published
2025-06-18T11:03:46.505Z
Modified
2026-05-28T03:54:24.401256802Z
Summary
arm64: fix oops in concurrently setting insn_emulation sysctls
Details

In the Linux kernel, the following vulnerability has been resolved:

arm64: fix oops in concurrently setting insn_emulation sysctls

emulationprochandler() changes table->data for procdointvecminmax and can generate the following Oops if called concurrently with itself:

| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 | Internal error: Oops: 96000006 [#1] SMP | Call trace: | updateinsnemulationmode+0xc0/0x148 | emulationprochandler+0x64/0xb8 | procsyscallhandler+0x9c/0xf8 | procsyswrite+0x18/0x20 | __vfswrite+0x20/0x48 | vfswrite+0xe4/0x1d0 | ksys_write+0x70/0xf8 | _arm64syswrite+0x20/0x28 | el0svccommon.constprop.0+0x7c/0x1c0 | el0svchandler+0x2c/0xa0 | el0svc+0x8/0x200

To fix this issue, keep the table->data as &insn->currentmode and use containerof() to retrieve the insn pointer. Another mutex is used to protect against the currentmode update but not for retrieving insnemulation as table->data is no longer changing.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50206.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0be7320a635c2e434e8b67e0e9474a85ceb421c4
Fixed
9d5fec6ba2e4117d196a8259ab54615ffe562460
Fixed
b51881b1da57fe9877125dfdd0aac5172958fcfd
Fixed
04549063d5701976034d8c2bfda3d3a8cbf0409f
Fixed
353b4673d01c512303c45cf2346f630cda73b5c9
Fixed
cc69ef95988b9ef2fc730ec452a7441efb90ef5e
Fixed
6a2fd114678d7fc1b5a0f8865ae98f1c17787455
Fixed
07022e07017ee5540f5559b0aeb916e8383c1e1a
Fixed
af483947d472eccb79e42059276c4deed76f99a6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50206.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.7.0
Fixed
4.14.291
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.256
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.211
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.137
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.61
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.18
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
5.19.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50206.json"