PT-2025-49634 · Git+3 · Kernel+90

Published 2025-12-09 · Updated 2025-12-22 · CVE-2022-50654

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0 #5

Description The Linux kernel contained a flaw related to the handling of page attributes within the BPF (Berkeley Packet Filter) subsystem. Specifically, a panic could occur when livepatch and kretfunc were used concurrently. This was due to an incorrect page attribute setting for the im->image structure, leading to a fault during read/write operations. The issue was triggered when arch prepare bpf trampoline was re-executed after modify fentry or register fentry returned -EAGAIN from bpf tramp ftrace ops func. The root cause was the pageattr of im->image being set to rox, causing a fault when arch prepare bpf trampoline attempted to read and write to it.

Recommendations Update to a version newer than 6.1.0 #5.

Exploit

Related Identifiers

CVE-2022-50654

Affected Products

Kernel

Linux

Linux-Allwinner-5.19

Linux-Aws

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Aws-Fips

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.2

Linux-Fips

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Nvidia-6.11

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.5

Linux-Raspi

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux-Xilinx

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50654.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50654 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50654 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50654 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50654 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50654 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50654 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50654 · Vendor Advisory
• https://git.kernel.org/stable/c/7f656fff955ccb216c40fa188a24c05fa40985a5 · Note
• https://twitter.com/CVEnew/status/2003198655650480239 · Twitter Post
• https://git.kernel.org/linus/9ed1d9aeef5842ecacb660fce933613b58af1e00 · Note
• https://git.kernel.org/stable/c/d9d383cbf812a3b4094c089aa5f5d41a3bb4531d · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/9ed1d9aeef5842ecacb660fce933613b58af1e00 · Note