CVE-2022-50075

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50075
In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Have event probes be consistent with kprobes and uprobes Currently, if a symbol "@" is attempted to be used with an event probe (eprobes), it will cause a NULL pointer dereference crash. Both kprobes and uprobes can reference data other than the main registers. Such as immediate address, symbols and the current task name. Have eprobes do the same thing. For "comm", if "comm" is used and the event being attached to does not have the "comm" field, then make it the "$comm" that kprobes has. This is consistent to the way histograms and filters work.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/47cc883f21fa3bcf24891b4b455f4cd461ce2d6e Patch
https://git.kernel.org/stable/c/6a832ec3d680b3a4f4fad5752672827d71bae501 Patch
https://git.kernel.org/stable/c/b489aca082a23033a3d8355cfb0032f0e2523440 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

17 Nov 2025, 19:31

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/47cc883f21fa3bcf24891b4b455f4cd461ce2d6e - () https://git.kernel.org/stable/c/47cc883f21fa3bcf24891b4b455f4cd461ce2d6e - Patch
References () https://git.kernel.org/stable/c/6a832ec3d680b3a4f4fad5752672827d71bae501 - () https://git.kernel.org/stable/c/6a832ec3d680b3a4f4fad5752672827d71bae501 - Patch
References () https://git.kernel.org/stable/c/b489aca082a23033a3d8355cfb0032f0e2523440 - () https://git.kernel.org/stable/c/b489aca082a23033a3d8355cfb0032f0e2523440 - Patch
CWE CWE-476
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tracing/eprobes: Que las sondas de eventos sean consistentes con kprobes y uprobes. Actualmente, si se intenta usar el símbolo "@" con una sonda de eventos (eprobes), se producirá un fallo por desreferencia de puntero nulo. Tanto kprobes como uprobes pueden referenciar datos distintos a los registros principales, como la dirección inmediata, los símbolos y el nombre de la tarea actual. Que eprobes haga lo mismo. Para "comm", si se usa "comm" y el evento al que se adjunta no tiene el campo "comm", se debe usar "$comm" que tiene kprobes. Esto es consistente con el funcionamiento de los histogramas y filtros.

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-17 19:31

NVD link : CVE-2022-50075

Mitre link : CVE-2022-50075

CVE.ORG link : CVE-2022-50075

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference