CVE-2022-50870powerpc/rtas: avoid device tree lookups in rtas_os_term()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid device tree lookups in rtas_os_term() rtas_os_term() is called during panic. Its behavior depends on a couple of conditions in the /rtas node of the device tree, the traversal of which entails locking and local IRQ state changes. If the kernel panics while devtree_lock is held, rtas_os_term() as currently written could hang. Instead of discovering the relevant characteristics at panic time, cache them in file-static variables at boot. Note the lookup for "ibm,extended-os-term" is converted to of_property_read_bool() since it is a boolean property, not an RTAS function token. [mpe: Incorporate suggested change from Nick]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 088186ded490ced80758200cf8f906ed741df306 before e23822c7381c59d9e42e65771b6e17c71ed30ea7; 088186ded490ced80758200cf8f906ed741df306 builds before 06a07fbb32b3a23eec20a42b1e64474da0a3b33e; from 088186ded490ced80758200cf8f906ed741df306 before c2fa91abf22a705cf02f886cd99cff41f4ceda60; from 088186ded490ced80758200cf8f906ed741df306 before f2167f10fcca68ab9ae3f8d94d2c704c5541ac69; from 088186ded490ced80758200cf8f906ed741df306 before d8939315b7342860df143afe0adda6212cdd3193; 088186ded490ced80758200cf8f906ed741df306 builds before 698e682c849e356fb47a8be47ca8baa817cf31e0; 088186ded490ced80758200cf8f906ed741df306 builds before 464d10e8d797454e16a173ef1292a446b2adf21c; from 088186ded490ced80758200cf8f906ed741df306 before ed2213bfb192ab51f09f12e9b49b5d482c6493f3 | CNA record |
References
- https://git.kernel.org/stable/c/e23822c7381c59d9e42e65771b6e17c71ed30ea7
- https://git.kernel.org/stable/c/06a07fbb32b3a23eec20a42b1e64474da0a3b33e
- https://git.kernel.org/stable/c/c2fa91abf22a705cf02f886cd99cff41f4ceda60
- https://git.kernel.org/stable/c/f2167f10fcca68ab9ae3f8d94d2c704c5541ac69
- https://git.kernel.org/stable/c/d8939315b7342860df143afe0adda6212cdd3193
- https://git.kernel.org/stable/c/698e682c849e356fb47a8be47ca8baa817cf31e0
- https://git.kernel.org/stable/c/464d10e8d797454e16a173ef1292a446b2adf21c
- https://git.kernel.org/stable/c/ed2213bfb192ab51f09f12e9b49b5d482c6493f3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.