CVE-2022-50096

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50096
In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Update kcb status flag after singlestepping Fix kprobes to update kcb (kprobes control block) status flag to KPROBE_HIT_SSDONE even if the kp->post_handler is not set. This bug may cause a kernel panic if another INT3 user runs right after kprobes because kprobe_int3_handler() misunderstands the INT3 is kprobe's single stepping INT3.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1cbf3882cb372bbe752efd7c3045ca1c9ab40ac6 Patch
https://git.kernel.org/stable/c/663cdda2716b70751df9c7e60b81bd0850fdfe3c Patch
https://git.kernel.org/stable/c/b9c3401f7cac6ae291a16784dadcd1bf116218fe Patch
https://git.kernel.org/stable/c/dec8784c9088b131a1523f582c2194cfc8107dc0 Patch
https://git.kernel.org/stable/c/edc2ac7c7265b33660fa0190898966b49966b855 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 14:26

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/kprobes: Actualización del indicador de estado de kcb tras el paso único. Se corrigió que kprobes actualizara el indicador de estado de kcb (bloque de control de kprobes) a KPROBE_HIT_SSDONE incluso si kp->post_handler no está configurado. Este error puede causar un pánico del kernel si otro usuario INT3 se ejecuta justo después de kprobes, ya que kprobe_int3_handler() malinterpreta que INT3 es el INT3 de paso único de kprobe.
References () https://git.kernel.org/stable/c/1cbf3882cb372bbe752efd7c3045ca1c9ab40ac6 - () https://git.kernel.org/stable/c/1cbf3882cb372bbe752efd7c3045ca1c9ab40ac6 - Patch
References () https://git.kernel.org/stable/c/663cdda2716b70751df9c7e60b81bd0850fdfe3c - () https://git.kernel.org/stable/c/663cdda2716b70751df9c7e60b81bd0850fdfe3c - Patch
References () https://git.kernel.org/stable/c/b9c3401f7cac6ae291a16784dadcd1bf116218fe - () https://git.kernel.org/stable/c/b9c3401f7cac6ae291a16784dadcd1bf116218fe - Patch
References () https://git.kernel.org/stable/c/dec8784c9088b131a1523f582c2194cfc8107dc0 - () https://git.kernel.org/stable/c/dec8784c9088b131a1523f582c2194cfc8107dc0 - Patch
References () https://git.kernel.org/stable/c/edc2ac7c7265b33660fa0190898966b49966b855 - () https://git.kernel.org/stable/c/edc2ac7c7265b33660fa0190898966b49966b855 - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 14:26

NVD link : CVE-2022-50096

Mitre link : CVE-2022-50096

CVE.ORG link : CVE-2022-50096

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo