Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50812

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_ZERO_CALL_USED_REGS to either a supported GCC version or a clang newer than 15.0.6, which will catch both a theoretical 15.0.7 and the upcoming 16.0.0, which will both have the bug fixed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to < 8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72caffected
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to < 0b202dfedb5aa2e7d07d849be33fa3a48c026926affected
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to < 21ca0bfa11bbb9a9207f5d2104f47d3d71b4616eaffected
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to < d6a9fb87e9d18f3394a9845546bbe868efdccfd2affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.86 to ≤ 5.15.*unaffected
  • 6.0.16 to ≤ 6.0.*unaffected
  • 6.1.2 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References