CVE-2022-50812
Description
In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_ZERO_CALL_USED_REGS to either a supported GCC version or a clang newer than 15.0.6, which will catch both a theoretical 15.0.7 and the upcoming 16.0.0, which will both have the bug fixed.
How to fix
- Linux Linux8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72c, 0b202dfedb5aa2e7d07d849be33fa3a48c026926, 21ca0bfa11bbb9a9207f5d2104f47d3d71b4616e, d6a9fb87e9d18f3394a9845546bbe868efdccfd2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | a82adfd5c7cb4b8bb37ef439aed954f9972bb618 ≤ v < 8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72c, a82adfd5c7cb4b8bb37ef439aed954f9972bb618 ≤ v < 0b202dfedb5aa2e7d07d849be33fa3a48c026926, a82adfd5c7cb4b8bb37ef439aed954f9972bb618 ≤ v < 21ca0bfa11bbb9a9207f5d2104f47d3d71b4616e, a82adfd5c7cb4b8bb37ef439aed954f9972bb618 ≤ v < d6a9fb87e9d18f3394a9845546bbe868efdccfd2, 5.15 | 8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72c, 0b202dfedb5aa2e7d07d849be33fa3a48c026926, 21ca0bfa11bbb9a9207f5d2104f47d3d71b4616e, d6a9fb87e9d18f3394a9845546bbe868efdccfd2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.