CVE-2022-50635

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc3-00007-gdcf8e5633e2e

Description The Linux kernel contains a flaw in the powerpc/kprobes subsystem. Specifically, a null pointer dereference can occur in the arch prepare kprobe() function when handling ftrace-based kprobes. This happens because the ppc inst read() function is called on a null pointer when prev->ainsn.insn is not properly checked. The issue arises when probing addresses with specific characteristics, such as those related to cmdline proc show. The vulnerability is triggered by attempting to read user page 0, potentially leading to a kernel crash.

Recommendations Update to a version later than 6.0.0-rc3-00007-gdcf8e5633e2e.