PT-2025-40110 · Linux+3 · Linux Kernel+3
Published
2022-10-21
·
Updated
2026-05-26
·
CVE-2022-50425
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's x86/fpu component, specifically within the
copy xstate to uabi() function. This issue arises when an extended state component is present in the initial state (init fpstate) but not in the current floating-point state (fpstate). The function attempts to copy data from init fpstate via copy feature(), leading to a kernel NULL pointer dereference when dynamic states are not present in init fpstate. This can cause a system crash. The fix involves adjusting a 'mask' to zero out the userspace buffer for features unavailable in both fpstate and init fpstate. The dynamic features rely on the compacted XSAVE format, which must be enabled before reading XCOMP BV in init fpstate.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse