CVE-2022-50225

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

riscv:uprobe fix SR_SPIE set/clear handling

In riscv the process of uprobe going to clear spie before exec

the origin insn,and set spie after that.But When access the page

which origin insn has been placed a page fault may happen and

irq was disabled in arch_uprobe_pre_xol function,It cause a WARN

as follows.

There is no need to clear/set spie in arch_uprobe_pre/post/abort_xol.

We can just remove it.

[ 31.684157] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1488

[ 31.684677] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 76, name: work

[ 31.684929] preempt_count: 0, expected: 0

[ 31.685969] CPU: 2 PID: 76 Comm: work Tainted: G

[ 31.686542] Hardware name: riscv-virtio,qemu (DT)

[ 31.686797] Call Trace:

[ 31.687053] [<ffffffff80006442>] dump_backtrace+0x30/0x38

[ 31.687699] [<ffffffff80812118>] show_stack+0x40/0x4c

[ 31.688141] [<ffffffff8081817a>] dump_stack_l

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References