CVE-2022-50012
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
23/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
powerpc/64: Init jump labels before parse_early_param()<br />
<br />
On 64-bit, calling jump_label_init() in setup_feature_keys() is too<br />
late because static keys may be used in subroutines of<br />
parse_early_param() which is again subroutine of early_init_devtree().<br />
<br />
For example booting with "threadirqs":<br />
<br />
static_key_enable_cpuslocked(): static key &#39;0xc000000002953260&#39; used before call to jump_label_init()<br />
WARNING: CPU: 0 PID: 0 at kernel/jump_label.c:166 static_key_enable_cpuslocked+0xfc/0x120<br />
...<br />
NIP static_key_enable_cpuslocked+0xfc/0x120<br />
LR static_key_enable_cpuslocked+0xf8/0x120<br />
Call Trace:<br />
static_key_enable_cpuslocked+0xf8/0x120 (unreliable)<br />
static_key_enable+0x30/0x50<br />
setup_forced_irqthreads+0x28/0x40<br />
do_early_param+0xa0/0x108<br />
parse_args+0x290/0x4e0<br />
parse_early_options+0x48/0x5c<br />
parse_early_param+0x58/0x84<br />
early_init_devtree+0xd4/0x518<br />
early_setup+0xb4/0x214<br />
<br />
So call jump_label_init() just before parse_early_param() in<br />
early_init_devtree().<br />
<br />
[mpe: Add call trace to change log and minor wording edits.]
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.9.326 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.10 (including) | 4.14.291 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.15 (including) | 4.19.256 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.20 (including) | 5.4.211 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.5 (including) | 5.10.138 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.63 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.19.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



