PT-2025-8374

CVE-2022-49440

·

Published

2022-01-01

·

Updated

2026-08-23

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version where the MSR[RI] issue is fixed
Description The issue arises from the Linux kernel's handling of the MSR[RI] bit when calling RTAS. RTAS is expected to be called with MSR[RI] set as specified in the PAPR+ section "7.2.1 Machine State". However, the kernel unsets MSR[RI] when entering RTAS without a valid reason. This can lead to a panic when hitting the watchdog interrupt while running in RTAS, resulting in an unrecoverable system reset. The estimated number of potentially affected devices is not provided.
Recommendations As a temporary workaround, consider reviewing and adjusting the MSR computation before calling RTAS to ensure MSR[RI] is set correctly. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
RHSA-2022:8267
RHSA-2023:0512
SUSE-SU-2025:1027-1
SUSE-SU-2025_1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
Found an issue in the description? Have something to add? Feel free to write us 👾