CVE-2022-50504 (GCVE-0-2022-50504)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:43 – Updated: 2025-12-23 13:29
VLAI?
Title
powerpc/rtas: avoid scheduling in rtas_os_term()
Summary
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_delay() to handle a busy status from the ibm,os-term RTAS function in rtas_os_term(): Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG: sleeping function called from invalid context at arch/powerpc/kernel/rtas.c:618 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1, name: swapper/0 preempt_count: 2, expected: 0 CPU: 7 PID: 1 Comm: swapper/0 Tainted: G D 6.0.0-rc5-02182-gf8553a572277-dirty #9 Call Trace: [c000000007b8f000] [c000000001337110] dump_stack_lvl+0xb4/0x110 (unreliable) [c000000007b8f040] [c0000000002440e4] __might_resched+0x394/0x3c0 [c000000007b8f0e0] [c00000000004f680] rtas_busy_delay+0x120/0x1b0 [c000000007b8f100] [c000000000052d04] rtas_os_term+0xb8/0xf4 [c000000007b8f180] [c0000000001150fc] pseries_panic+0x50/0x68 [c000000007b8f1f0] [c000000000036354] ppc_panic_platform_handler+0x34/0x50 [c000000007b8f210] [c0000000002303c4] notifier_call_chain+0xd4/0x1c0 [c000000007b8f2b0] [c0000000002306cc] atomic_notifier_call_chain+0xac/0x1c0 [c000000007b8f2f0] [c0000000001d62b8] panic+0x228/0x4d0 [c000000007b8f390] [c0000000001e573c] do_exit+0x140c/0x1420 [c000000007b8f480] [c0000000001e586c] make_task_dead+0xdc/0x200 Use rtas_busy_delay_time() instead, which signals without side effects whether to attempt the ibm,os-term RTAS call again.
Severity ?
No CVSS data available.
Assigner
Impacted products
Vendor Product Version
Linux Linux Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < f413135b337c4e90c1e593c6613f8717e17bc724 (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < 4768935b8cc2d2afeb7956292df0f6e2c49ca0a5 (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < ffa991a003abb4f8cb9e5004646bfe2d9a46912c (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < 515959eb49e6d218a46979d66f36fdef329ac7d2 (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < 6f7e2fcab73372a371ab4017cbedf7a71f4f9b40 (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < 7280fdb80bf0fe35d9b799fc7009f2cbe0a397d7 (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < bed48651c87bef59ea1a9d6dbc381bcbc452f4ff (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < 482d990a5dd1027ee0b70a8a570d56749cac8103 (git)
Affected: 507279db1819aacf4022e790b3fc8bc8cf56debf , < 6c606e57eecc37d6b36d732b1ff7e55b7dc32dd4 (git)
Create a notification for this product.
    Linux Linux Affected: 2.6.18
Unaffected: 0 , < 2.6.18 (semver)
Unaffected: 4.9.337 , ≤ 4.9.* (semver)
Unaffected: 4.14.303 , ≤ 4.14.* (semver)
Unaffected: 4.19.270 , ≤ 4.19.* (semver)
Unaffected: 5.4.229 , ≤ 5.4.* (semver)
Unaffected: 5.10.163 , ≤ 5.10.* (semver)
Unaffected: 5.15.87 , ≤ 5.15.* (semver)
Unaffected: 6.0.17 , ≤ 6.0.* (semver)
Unaffected: 6.1.3 , ≤ 6.1.* (semver)
Unaffected: 6.2 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/kernel/rtas.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f413135b337c4e90c1e593c6613f8717e17bc724",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "4768935b8cc2d2afeb7956292df0f6e2c49ca0a5",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "ffa991a003abb4f8cb9e5004646bfe2d9a46912c",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "515959eb49e6d218a46979d66f36fdef329ac7d2",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "6f7e2fcab73372a371ab4017cbedf7a71f4f9b40",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "7280fdb80bf0fe35d9b799fc7009f2cbe0a397d7",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "bed48651c87bef59ea1a9d6dbc381bcbc452f4ff",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "482d990a5dd1027ee0b70a8a570d56749cac8103",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            },
            {
              "lessThan": "6c606e57eecc37d6b36d732b1ff7e55b7dc32dd4",
              "status": "affected",
              "version": "507279db1819aacf4022e790b3fc8bc8cf56debf",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/kernel/rtas.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.18"
            },
            {
              "lessThan": "2.6.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.337",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.87",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.337",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.303",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.270",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.229",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.163",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.87",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.17",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.3",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "2.6.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/rtas: avoid scheduling in rtas_os_term()\n\nIt\u0027s unsafe to use rtas_busy_delay() to handle a busy status from\nthe ibm,os-term RTAS function in rtas_os_term():\n\nKernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b\nBUG: sleeping function called from invalid context at arch/powerpc/kernel/rtas.c:618\nin_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1, name: swapper/0\npreempt_count: 2, expected: 0\nCPU: 7 PID: 1 Comm: swapper/0 Tainted: G      D            6.0.0-rc5-02182-gf8553a572277-dirty #9\nCall Trace:\n[c000000007b8f000] [c000000001337110] dump_stack_lvl+0xb4/0x110 (unreliable)\n[c000000007b8f040] [c0000000002440e4] __might_resched+0x394/0x3c0\n[c000000007b8f0e0] [c00000000004f680] rtas_busy_delay+0x120/0x1b0\n[c000000007b8f100] [c000000000052d04] rtas_os_term+0xb8/0xf4\n[c000000007b8f180] [c0000000001150fc] pseries_panic+0x50/0x68\n[c000000007b8f1f0] [c000000000036354] ppc_panic_platform_handler+0x34/0x50\n[c000000007b8f210] [c0000000002303c4] notifier_call_chain+0xd4/0x1c0\n[c000000007b8f2b0] [c0000000002306cc] atomic_notifier_call_chain+0xac/0x1c0\n[c000000007b8f2f0] [c0000000001d62b8] panic+0x228/0x4d0\n[c000000007b8f390] [c0000000001e573c] do_exit+0x140c/0x1420\n[c000000007b8f480] [c0000000001e586c] make_task_dead+0xdc/0x200\n\nUse rtas_busy_delay_time() instead, which signals without side effects\nwhether to attempt the ibm,os-term RTAS call again."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-23T13:29:42.710Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f413135b337c4e90c1e593c6613f8717e17bc724"
        },
        {
          "url": "https://git.kernel.org/stable/c/4768935b8cc2d2afeb7956292df0f6e2c49ca0a5"
        },
        {
          "url": "https://git.kernel.org/stable/c/ffa991a003abb4f8cb9e5004646bfe2d9a46912c"
        },
        {
          "url": "https://git.kernel.org/stable/c/515959eb49e6d218a46979d66f36fdef329ac7d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/6f7e2fcab73372a371ab4017cbedf7a71f4f9b40"
        },
        {
          "url": "https://git.kernel.org/stable/c/7280fdb80bf0fe35d9b799fc7009f2cbe0a397d7"
        },
        {
          "url": "https://git.kernel.org/stable/c/bed48651c87bef59ea1a9d6dbc381bcbc452f4ff"
        },
        {
          "url": "https://git.kernel.org/stable/c/482d990a5dd1027ee0b70a8a570d56749cac8103"
        },
        {
          "url": "https://git.kernel.org/stable/c/6c606e57eecc37d6b36d732b1ff7e55b7dc32dd4"
        }
      ],
      "title": "powerpc/rtas: avoid scheduling in rtas_os_term()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50504",
    "datePublished": "2025-10-04T15:43:53.523Z",
    "dateReserved": "2025-10-04T15:39:19.465Z",
    "dateUpdated": "2025-12-23T13:29:42.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-50504\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-04T16:15:47.607\",\"lastModified\":\"2025-10-06T14:56:21.733\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowerpc/rtas: avoid scheduling in rtas_os_term()\\n\\nIt\u0027s unsafe to use rtas_busy_delay() to handle a busy status from\\nthe ibm,os-term RTAS function in rtas_os_term():\\n\\nKernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b\\nBUG: sleeping function called from invalid context at arch/powerpc/kernel/rtas.c:618\\nin_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1, name: swapper/0\\npreempt_count: 2, expected: 0\\nCPU: 7 PID: 1 Comm: swapper/0 Tainted: G      D            6.0.0-rc5-02182-gf8553a572277-dirty #9\\nCall Trace:\\n[c000000007b8f000] [c000000001337110] dump_stack_lvl+0xb4/0x110 (unreliable)\\n[c000000007b8f040] [c0000000002440e4] __might_resched+0x394/0x3c0\\n[c000000007b8f0e0] [c00000000004f680] rtas_busy_delay+0x120/0x1b0\\n[c000000007b8f100] [c000000000052d04] rtas_os_term+0xb8/0xf4\\n[c000000007b8f180] [c0000000001150fc] pseries_panic+0x50/0x68\\n[c000000007b8f1f0] [c000000000036354] ppc_panic_platform_handler+0x34/0x50\\n[c000000007b8f210] [c0000000002303c4] notifier_call_chain+0xd4/0x1c0\\n[c000000007b8f2b0] [c0000000002306cc] atomic_notifier_call_chain+0xac/0x1c0\\n[c000000007b8f2f0] [c0000000001d62b8] panic+0x228/0x4d0\\n[c000000007b8f390] [c0000000001e573c] do_exit+0x140c/0x1420\\n[c000000007b8f480] [c0000000001e586c] make_task_dead+0xdc/0x200\\n\\nUse rtas_busy_delay_time() instead, which signals without side effects\\nwhether to attempt the ibm,os-term RTAS call again.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/4768935b8cc2d2afeb7956292df0f6e2c49ca0a5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/482d990a5dd1027ee0b70a8a570d56749cac8103\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/515959eb49e6d218a46979d66f36fdef329ac7d2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6c606e57eecc37d6b36d732b1ff7e55b7dc32dd4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6f7e2fcab73372a371ab4017cbedf7a71f4f9b40\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7280fdb80bf0fe35d9b799fc7009f2cbe0a397d7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/bed48651c87bef59ea1a9d6dbc381bcbc452f4ff\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f413135b337c4e90c1e593c6613f8717e17bc724\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ffa991a003abb4f8cb9e5004646bfe2d9a46912c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…