CVE-2022-50812security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_ZERO_CALL_USED_REGS to either a supported GCC version or a clang newer than 15.0.6, which will catch both a theoretical 15.0.7 and the upcoming 16.0.0, which will both have the bug fixed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a82adfd5c7cb4b8bb37ef439aed954f9972bb618 before 8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72c; from a82adfd5c7cb4b8bb37ef439aed954f9972bb618 before 0b202dfedb5aa2e7d07d849be33fa3a48c026926; from a82adfd5c7cb4b8bb37ef439aed954f9972bb618 before 21ca0bfa11bbb9a9207f5d2104f47d3d71b4616e; from a82adfd5c7cb4b8bb37ef439aed954f9972bb618 before d6a9fb87e9d18f3394a9845546bbe868efdccfd2 | CNA record |
References
- https://git.kernel.org/stable/c/8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72c
- https://git.kernel.org/stable/c/0b202dfedb5aa2e7d07d849be33fa3a48c026926
- https://git.kernel.org/stable/c/21ca0bfa11bbb9a9207f5d2104f47d3d71b4616e
- https://git.kernel.org/stable/c/d6a9fb87e9d18f3394a9845546bbe868efdccfd2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.