PT-2025-25903 · Linux+6 · Linux Kernel+6
Published
2022-08-21
·
Updated
2025-07-29
·
CVE-2022-49977
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the fixed version
Description
A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ftrace functionality. This issue arises when ftrace startup enable fails, causing the ops to remain in the ftrace ops list even after ftrace disabled is set to 1. As a result, when is ftrace trampoline is called, it may access a NULL pointer, leading to a kernel crash. The issue has been reported by Syzkaller, which detected a kernel NULL pointer dereference.
Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the NULL pointer dereference in is ftrace trampoline. As a temporary workaround, consider disabling the ftrace functionality until a patch is available. Restrict access to the ftrace ops list to minimize the risk of exploitation. Avoid using dynamically allocated ops in the ftrace ops list until the issue is resolved.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Rocky Linux
Suse