CVE-2022-50504

powerpc/rtas: avoid scheduling in rtas_os_term()

MEDIUM
5.5
CVSS Score
Published: October 4, 2025 at 03:43 PM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() It's unsafe to use rtas_busy_delay() to handle a busy status from the ibm,os-term RTAS function in rtas_os_term(): Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG: sleeping function called from invalid context at arch/powerpc/kernel/rtas.c:618 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1, name: swapper/0 preempt_count: 2, expected: 0 CPU: 7 PID: 1 Comm: swapper/0 Tainted: G D 6.0.0-rc5-02182-gf8553a572277-dirty #9 Call Trace: [c000000007b8f000] [c000000001337110] dump_stack_lvl+0xb4/0x110 (unreliable) [c000000007b8f040] [c0000000002440e4] __might_resched+0x394/0x3c0 [c000000007b8f0e0] [c00000000004f680] rtas_busy_delay+0x120/0x1b0 [c000000007b8f100] [c000000000052d04] rtas_os_term+0xb8/0xf4 [c000000007b8f180] [c0000000001150fc] pseries_panic+0x50/0x68 [c000000007b8f1f0] [c000000000036354] ppc_panic_platform_handler+0x34/0x50 [c000000007b8f210] [c0000000002303c4] notifier_call_chain+0xd4/0x1c0 [c000000007b8f2b0] [c0000000002306cc] atomic_notifier_call_chain+0xac/0x1c0 [c000000007b8f2f0] [c0000000001d62b8] panic+0x228/0x4d0 [c000000007b8f390] [c0000000001e573c] do_exit+0x140c/0x1420 [c000000007b8f480] [c0000000001e586c] make_task_dead+0xdc/0x200 Use rtas_busy_delay_time() instead, which signals without side effects whether to attempt the ibm,os-term RTAS call again.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.18 ≤ v < 4.14.3032.6.18 ≤ v < 4.19.2702.6.18 ≤ v < 4.9.3372.6.18 ≤ v < 5.10.1632.6.18 ≤ v < 5.15.872.6.18 ≤ v < 5.4.2292.6.18 ≤ v < 6.0.172.6.18 ≤ v < 6.1.32.6.18 ≤ v < 6.24.10 ≤ v < 4.14.3034.15 ≤ v < 4.19.2704.20 ≤ v < 5.4.2295.11 ≤ v < 5.15.875.16 ≤ v < 6.0.175.5 ≤ v < 5.10.1636.1 ≤ v < 6.1.32.6.18507279db1819aacf4022e790b3fc8bc8cf56debf
Vendor states this is fixed in 4768935b8cc2d2afeb7956292df0f6e2c49ca0a5 (fixed)
Vendor states this is fixed in 482d990a5dd1027ee0b70a8a570d56749cac8103 (fixed)
Vendor states this is fixed in 515959eb49e6d218a46979d66f36fdef329ac7d2 (fixed)
Vendor states this is fixed in 6c606e57eecc37d6b36d732b1ff7e55b7dc32dd4 (fixed)
Vendor states this is fixed in 6f7e2fcab73372a371ab4017cbedf7a71f4f9b40 (fixed)
Vendor states this is fixed in 7280fdb80bf0fe35d9b799fc7009f2cbe0a397d7 (fixed)
Vendor states this is fixed in bed48651c87bef59ea1a9d6dbc381bcbc452f4ff (fixed)
Vendor states this is fixed in f413135b337c4e90c1e593c6613f8717e17bc724 (fixed)
Vendor states this is fixed in ffa991a003abb4f8cb9e5004646bfe2d9a46912c (fixed)
Vendor states this is fixed in 2.6.18 (unaffected)
Vendor states this is fixed in 4.14.303 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 4.9.337 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.87 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.17 (unaffected)
Vendor states this is fixed in 6.1.3 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card