PT-2025-18605

CVE-2022-49888

·

Publicado

2022-10-17

·

Atualizado

2025-07-10

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0
Description The issue is related to the Linux kernel, specifically the arm64 architecture. It involves the function cortex a76 erratum 1463225 debug handler(), which is called when handling debug exceptions. If this function is not inlined by the compiler, it can be probed, leading to recursive exceptions and a stack overflow. This can be triggered using the ftrace multiple probes selftest. The problem is a regression caused by a commit that removed the NOKPROBE SYMBOL() annotation associated with the function. To fix this, the function is marked as always inline to ensure it is inlined into its caller, el1 dbg(), which cannot be probed.
Recommendations For Linux kernel versions prior to 6.0.0, apply the patch that marks cortex a76 erratum 1463225 debug handler() as always inline to prevent it from being probed and to avoid the stack overflow issue. As a temporary workaround, consider disabling the cortex a76 erratum 1463225 debug handler() function until a patch is available.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:02173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025_02262-1
SUSE-SU-2025:2173-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾