CVE-2022-50091
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-50091
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50091.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-50091
- Downstream
- Related
- Published
- 2025-06-18T11:15:38Z
- Modified
- 2025-06-18T16:00:24Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
locking/csdlock: Change csdlockdebug from earlyparam to _setup
The csdlockdebug kernel-boot parameter is parsed by the earlyparam() function csdlockdebug(). If set, csdlockdebug() invokes staticbranchenable() to enable csdlockwait feature, which triggers a panic on arm64 for kernels built with CONFIGSPARSEMEM=y and CONFIGSPARSEMEM_VMEMMAP=n.
With CONFIGSPARSEMEMVMEMMAP=n, _nrtosection is called in statickeyenable() and returns NULL, resulting in a NULL dereference because memsection is initialized only later in sparse_init().
This is also a problem for powerpc because earlyparam() functions are invoked earlier than jumplabelinit(), also resulting in statickeyenable() failures. These failures cause the warning "static key 'xxx' used before call to jumplabel_init()".
Thus, earlyparam is too early for csdlockwait to run staticbranchenable(), so changes it to _setup to fix these.
- References
-
- https://git.kernel.org/stable/c/05de9e2e33b1625c71aee69e353fe906dd2be88a
- https://git.kernel.org/stable/c/9c9b26b0df270d4f9246e483a44686fca951a29c
- https://git.kernel.org/stable/c/b480d1e9a8c11ecc1c99dc01814b28e3103bd0a0
- https://git.kernel.org/stable/c/d2cbdbe22b5f190055d2d0ae92e7454479343a30
- https://security-tracker.debian.org/tracker/CVE-2022-50091
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source