PT-2025-53024 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2026-05-26 · CVE-2022-50720

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to the Advanced Programmable Interrupt Controller (APIC). The APIC supports legacy APIC (xAPIC) and Extended APIC (x2APIC) modes. A new feature allows the BIOS to lock the APIC in x2APIC mode. If locked in x2APIC mode, attempting to disable the APIC or revert to legacy APIC mode results in a General Protection Fault (GP fault). This issue is related to the APIC LEAK vulnerability, which allows an attacker to extract data from the Secure Guard Extensions (SGX) enclave using the APIC memory-mapped interface. The vulnerability is addressed by introducing support for a new Model Specific Register (MSR) and preventing the kernel from disabling x2APIC when the LEGACY XAPIC DISABLED bit is set. If legacy APIC is required, SGX and Trusted Domain Extensions (TDX) must be disabled in the BIOS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50720

RHSA-2024:8613

RHSA-2024:9315

Affected Products

Debian

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50720.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50720 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50720 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50720 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50720 · Security Note
• https://ubuntu.com/security/CVE-2022-50720 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50720 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50720 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50720 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50720 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025122417-CVE-2022-50720-0297@gregkh/T · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2004457818183909495 · Twitter Post
• https://git.kernel.org/stable/c/dd1241e00addbf0b95f6cd6ce32152692820657e · Note
• https://git.kernel.org/stable/c/05785ba834f23272f9d23427ae4a80ac505a5296 · Note