CVE-2022-50266
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix check for probe enabled in kill_kprobe() In kill_kprobe(), the check whether disarm_kprobe_ftrace() needs to be called always fails. This is because before that we set the KPROBE_FLAG_GONE flag for kprobe so that "!kprobe_disabled(p)" is always false. The disarm_kprobe_ftrace() call introduced by commit: 0cb2f1372baa ("kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler") to fix the NULL pointer reference problem. When the probe is enabled, if we do not disarm it, this problem still exists. Fix it by putting the probe enabled check before setting the KPROBE_FLAG_GONE flag.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-09-15 15:15:37.347000
Last modified
2026-11-05 20:17:30.700000
View original CVE JSON
{
"id": "CVE-2022-50266",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T15:15:37.347",
"lastModified": "2026-11-05T20:17:30.700",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nkprobes: Fix check for probe enabled in kill_kprobe()\n\nIn kill_kprobe(), the check whether disarm_kprobe_ftrace() needs to be\ncalled always fails. This is because before that we set the\nKPROBE_FLAG_GONE flag for kprobe so that \"!kprobe_disabled(p)\" is always\nfalse.\n\nThe disarm_kprobe_ftrace() call introduced by commit:\n\n 0cb2f1372baa (\"kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler\")\n\nto fix the NULL pointer reference problem. When the probe is enabled, if\nwe do not disarm it, this problem still exists.\n\nFix it by putting the probe enabled check before setting the\nKPROBE_FLAG_GONE flag."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"kernel/kprobes.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3031313eb3d549b7ad6f9fbcc52ba04412e3eb9e",
"lessThan": "f20a067f13106565816b4b6a6b665b2088a63824",
"versionType": "git",
"status": "affected"
},
{
"version": "3031313eb3d549b7ad6f9fbcc52ba04412e3eb9e",
"lessThan": "c909985dd0c0f74b61e3f8f0e04bf8aa9c8b97c7",
"versionType": "git",
"status": "affected"
},
{
"version": "3031313eb3d549b7ad6f9fbcc52ba04412e3eb9e",
"lessThan": "0c76ef3f26d5ef2ac2c21b47e7620cff35809fbb",
"versionType": "git",
"status": "affected"
},
{
"version": "3c5f8d371b7fef3e3714c4a062c7f3b4aa41d122",
"versionType": "git",
"status": "affected"
},
{
"version": "9b55d84deec88c02b053a819acf08a6d471dda02",
"versionType": "git",
"status": "affected"
},
{
"version": "2295608b44c91df767a5c68027f9c9e52ecb28e7",
"versionType": "git",
"status": "affected"
},
{
"version": "ce7ff920092130f249b75f9fe177edb3362fefe8",
"versionType": "git",
"status": "affected"
},
{
"version": "3995f7a60feceba6c8f762f4aff3184f90a1291d",
"versionType": "git",
"status": "affected"
},
{
"version": "247c62ebdfae450bb76dd89cd4724df6be07df75",
"versionType": "git",
"status": "affected"
},
{
"version": "4.4.238",
"lessThan": "4.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.9.238",
"lessThan": "4.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.14.200",
"lessThan": "4.15",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.19.149",
"lessThan": "4.20",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.4.69",
"lessThan": "5.5",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.8.13",
"lessThan": "5.9",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"kernel/kprobes.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.9",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.9",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.0.16",
"lessThanOrEqual": "6.0.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.2",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.2",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-11-05T20:08:08.331534Z",
"id": "CVE-2022-50266",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4.238",
"versionEndExcluding": "4.5",
"matchCriteriaId": "06D736F2-3AF9-405C-A2D4-D7A433966CD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9.238",
"versionEndExcluding": "4.10",
"matchCriteriaId": "C239C4E4-A9BE-4BA4-B0ED-58C96D32A965"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14.200",
"versionEndExcluding": "4.15",
"matchCriteriaId": "E4C219D0-2F4C-4842-85C7-5EE4D0099F82"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.149",
"versionEndExcluding": "4.20",
"matchCriteriaId": "22D98FED-AEF1-4722-8A24-E84AEFBAE267"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.69",
"versionEndExcluding": "5.5",
"matchCriteriaId": "20BCB29D-C30A-4880-8FC2-2468E283C95D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.8.13",
"versionEndExcluding": "5.9",
"matchCriteriaId": "98C441DE-65B1-4897-95F0-EA0B85BF8E9A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.9.1",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "E34DDF25-ACCC-4528-9862-743137C1BCBB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.9:-:*:*:*:*:*:*",
"matchCriteriaId": "F79A2EB6-623E-4749-AEE0-DCB58C4C42F8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.9:rc7:*:*:*:*:*:*",
"matchCriteriaId": "47E31D6A-31EC-4F63-9CAE-B7A52B58E149"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.9:rc8:*:*:*:*:*:*",
"matchCriteriaId": "3497462B-A3DA-47CC-A5DD-C1C2D2E6DFDE"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0c76ef3f26d5ef2ac2c21b47e7620cff35809fbb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c909985dd0c0f74b61e3f8f0e04bf8aa9c8b97c7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f20a067f13106565816b4b6a6b665b2088a63824",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}