CVE-2022-50159

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified where the ima get kexec buffer() function does not check if the previous kernel's ima-kexec-buffer lies outside the addressable memory range. This can result in a kernel panic if the new kernel is booted with a limited memory argument and the ima-kexec-buffer was allocated beyond that range by the previous kernel. The panic typically occurs with an error message indicating a kernel access of a bad area.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.