CVE-2022-50870: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2022-50870DEBIAN-CVE-2022-50870
Published 30-12-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2022-50870 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.7% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 7
SUSE-SU-2026:0263-1SUSE-SU-2026:0316-1SUSE-SU-2026:0317-1SUSE-SU-2026:0350-1SUSE-SU-2026:0369-1SUSE-SU-2026:0411-1

Timeline

  1. 30-12-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid device tree lookups in rtas_os_term() rtas_os_term() is called during panic. Its behavior depends on a couple of conditions in the /rtas node of the device tree, the traversal of which entails locking and local IRQ state changes. If the kernel panics while devtree_lock is held, rtas_os_term() as currently written could hang. Instead of discovering the relevant characteristics at panic time, cache them in file-static variables at boot. Note the lookup for "ibm,extended-os-term" is converted to of_property_read_bool() since it is a boolean property, not an RTAS function token. [mpe: Incorporate suggested change from Nick]

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu122 products
  • linuxAll versions (No fix recorded) | < 4.15.0-208.220 | < 5.4.0-144.161 | < 5.15.0-69.76
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 4.15.0-1153.166 | < 5.4.0-1097.105 | < 5.15.0-1033.37
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.4-1
Linux1 product
  • linux≥ 088186ded490ced80758200cf8f906ed741df306, < e23822c7381c59d9e42e65771b6e17c71ed30ea7 | ≥ 088186ded490ced80758200cf8f906ed741df306, < 06a07fbb32b3a23eec20a42b1e64474da0a3b33e | ≥ 088186ded490ced80758200cf8f906ed741df306, < c2fa91abf22a705cf02f886cd99cff41f4ceda60 | ≥ 088186ded490ced80758200cf8f906ed741df306, < f2167f10fcca68ab9ae3f8d94d2c704c5541ac69 | ≥ 088186ded490ced80758200cf8f906ed741df306, < d8939315b7342860df143afe0adda6212cdd3193 | ≥ 088186ded490ced80758200cf8f906ed741df306, < 698e682c849e356fb47a8be47ca8baa817cf31e0 | ≥ 088186ded490ced80758200cf8f906ed741df306, < 464d10e8d797454e16a173ef1292a446b2adf21c | ≥ 088186ded490ced80758200cf8f906ed741df306, < ed2213bfb192ab51f09f12e9b49b5d482c6493f3 | 2.6.16

3 vendors · 124 products

References

12 links
Show all 12 references