Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-50091— locking/csd_lock: Change csdlock_debug from early_param to __setup

AI Predicted 5.5 Difficulty: Moderate EPSS 0.21% · P11

Possible ATT&CK Techniques 1AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 10

VendorProductVersion RangeStatus
LinuxLinux8d0968cc6b8ffd8496c2ebffdfdc801f949a85e5< d2cbdbe22b5f190055d2d0ae92e7454479343a30affected
8d0968cc6b8ffd8496c2ebffdfdc801f949a85e5< 05de9e2e33b1625c71aee69e353fe906dd2be88aaffected
8d0968cc6b8ffd8496c2ebffdfdc801f949a85e5< b480d1e9a8c11ecc1c99dc01814b28e3103bd0a0affected
8d0968cc6b8ffd8496c2ebffdfdc801f949a85e5< 9c9b26b0df270d4f9246e483a44686fca951a29caffected
5.13affected
< 5.13unaffected
5.15.61≤ 5.15.*unaffected
5.18.18≤ 5.18.*unaffected
… +2 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-50091

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
locking/csd_lock: Change csdlock_debug from early_param to __setup
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: locking/csd_lock: Change csdlock_debug from early_param to __setup The csdlock_debug kernel-boot parameter is parsed by the early_param() function csdlock_debug(). If set, csdlock_debug() invokes static_branch_enable() to enable csd_lock_wait feature, which triggers a panic on arm64 for kernels built with CONFIG_SPARSEMEM=y and CONFIG_SPARSEMEM_VMEMMAP=n. With CONFIG_SPARSEMEM_VMEMMAP=n, __nr_to_section is called in static_key_enable() and returns NULL, resulting in a NULL dereference because mem_section is initialized only later in sparse_init(). This is also a problem for powerpc because early_param() functions are invoked earlier than jump_label_init(), also resulting in static_key_enable() failures. These failures cause the warning "static key 'xxx' used before call to jump_label_init()". Thus, early_param is too early for csd_lock_wait to run static_branch_enable(), so changes it to __setup to fix these.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于csdlock_debug过早调用static_branch_enable，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 8d0968cc6b8ffd8496c2ebffdfdc801f949a85e5 ~ d2cbdbe22b5f190055d2d0ae92e7454479343a30 -
LinuxLinux 5.13 -

II. Public POCs for CVE-2022-50091

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50091

请登录查看更多情报信息。

Patches & Fixes for CVE-2022-50091 (1)

Same Patch Batch · Linux · 2025-06-18 · 362 CVEs total

CVE-2025-380759.8 CRITICALscsi: target: iscsi: Fix timeout on deleted connection
CVE-2025-380748.8 HIGHvhost-scsi: protect vq->log_used with vq->mutex
CVE-2025-380528.8 HIGHnet/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
CVE-2025-380168.8 HIGHHID: bpf: abort dispatch if device destroyed
CVE-2025-380627.8 HIGHgenirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
CVE-2025-380287.8 HIGHNFS/localio: Fix a race in nfs_local_open_fh()
CVE-2025-380247.8 HIGHRDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
CVE-2025-380587.8 HIGH__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
CVE-2025-380227.8 HIGHRDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
CVE-2025-380797.8 HIGHcrypto: algif_hash - fix double free in hash_accept
CVE-2025-380057.8 HIGHdmaengine: ti: k3-udma: Add missing locking
CVE-2025-380607.8 HIGHbpf: copy_verifier_state() should copy 'loop_entry' field
CVE-2025-380807.8 HIGHdrm/amd/display: Increase block_sequence array size
CVE-2025-380127.8 HIGHsched_ext: bpf_iter_scx_dsq_new() should always initialize iterator
CVE-2025-380517.8 HIGHsmb: client: Fix use-after-free in cifs_fill_dirent
CVE-2025-380687.8 HIGHcrypto: lzo - Fix compression buffer overrun
CVE-2025-380657.8 HIGHorangefs: Do not truncate file size
CVE-2025-380647.8 HIGHvirtio: break and reset virtio devices on device_shutdown()
CVE-2025-380827.8 HIGHgpio: virtuser: fix potential out-of-bound write
CVE-2025-380787.8 HIGHALSA: pcm: Fix race of buffer access at PCM OSS layer

Showing top 20 of 362 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-50091

No comments yet

Leave a comment