PT-2025-40738 · Linux+2 · Linux Kernel+2

Published 2022-12-07 · Updated 2025-12-04 · CVE-2022-50504

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5-02182-gf8553a572277

Description The Linux kernel contains a flaw in the powerpc/rtas subsystem. Specifically, it is unsafe to use rtas busy delay() to handle a busy status from the ibm,os-term RTAS function within rtas os term(). This can lead to a kernel panic, potentially causing a system crash. The issue arises from attempting to schedule tasks within an invalid context. The recommended solution is to utilize rtas busy delay time() instead, which avoids these side effects and allows for safe retries of the ibm,os-term RTAS call.

Recommendations Update the Linux kernel to version 6.0.0-rc5-02182-gf8553a572277 or later.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-02343

CVE-2022-50504

SUSE-SU-2025:4111-1

SUSE-SU-2025:4135-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4188-1

SUSE-SU-2025:4189-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

Ibm

References · 637

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50504.json · Exploit
• https://git.kernel.org/stable/c/515959eb49e6d218a46979d66f36fdef329ac7d2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50504 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50504 · Security Note
• https://git.kernel.org/stable/c/6c606e57eecc37d6b36d732b1ff7e55b7dc32dd4 · Patch
• https://git.kernel.org/stable/c/f413135b337c4e90c1e593c6613f8717e17bc724 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50504 · Vendor Advisory
• https://git.kernel.org/stable/c/482d990a5dd1027ee0b70a8a570d56749cac8103 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4135-1 · Vendor Advisory
• https://git.kernel.org/stable/c/ffa991a003abb4f8cb9e5004646bfe2d9a46912c · Patch
• https://git.kernel.org/stable/c/bed48651c87bef59ea1a9d6dbc381bcbc452f4ff · Patch
• https://git.kernel.org/stable/c/6f7e2fcab73372a371ab4017cbedf7a71f4f9b40 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50504 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02343 · Security Note