CVE-2022-50674 in Linux
Сводка
по VulDB • 15.06.2026
В ядре Linux устранена следующая уязвимость:
riscv: vdso: исправлено разыменование NULL-указателя в vdso_join_timens() при использовании vfork
При тестировании инструмента testing/tools/selftests/timens/vfork_exec.c был получен следующий журнал ядра:
[ 6.838454] Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000000000020
[ 6.842255] Oops [#1]
[ 6.842871] Modules linked in:
[ 6.844249] CPU: 1 PID: 64 Comm: vfork_exec Not tainted 6.0.0-rc3-rt15+ #8
[ 6.845861] Hardware name: riscv-virtio,qemu (DT)
[ 6.848009] epc : vdso_join_timens+0xd2/0x110
[ 6.850097] ra : vdso_join_timens+0xd2/0x110
[ 6.851197] epc : fffffff80008dc94 ra : fffffff80008dc94 sp : ff6000000181f9a0
[ 6.852689] a0 : 0000000000000000 a1 : 0000000000000000 a2 : 0000000000000000
[ 6.854181] a3 : 0000000000000000 a4 : 0000000000000000 a5 : 0000000000000000
[ 6.855673] a6 : 0000000000000000 a7 : 0000000000000000 s0 : ff6000000181fa00
[ 6.857165] s1 : 0000000000000000 s2 : 0000000000000000 s3 : 0000000000000000
[ 6.858657] s4 : 0000000000000000 s5 : 0000000000000000 s6 : ffffffff8089dc40
[ 6.860049] s7 : ffffffff8089dc38 s8 : ffffffff8089dc30 s9 : ff60000000fdbe38
[ 6.861541] s10: 000000000000005e s11: ffffffff80cc3510 t3 : ffffffff80d1112f
[ 6.863033] t4 : ffffffff80d1112f t5 : ffffffff80d11130 t6 : ff6000000181fa00
[ 6.864525] status: 0000000000000120 badaddr: 0000000000000020 cause: 000000000000000d
[ 6.867010] [<ffffffff8008dc94>] timens_commit+0x38/0x11a
[ 6.868053] [<ffffffff8008dde8>] timens_on_fork+0x72/0xb4
[ 6.869097] [<ffffffff80190096>] begin_new_exec+0x3c6/0x9f0
[ 6.870141] [<ffffffff801d826c>] load_elf_binary+0x628/0x1214
[ 6.871185] [<ffffffff8018ee7a>] bprm_execve+0x1f2/0x4e4
[ 6.872229] [<ffffffff8018f90c>] do_execveat_common+0x16e/0x1ee
[ 6.873273] [<ffffffff8018f9c8>] sys_execve+0x3c/0x48
[ 6.874317] [<ffffffff80003556>] ret_from_syscall+0x0/0x2
[ 6.876603] ---[ end trace 0000000000000000 ]---
Это происходит потому, что mm->context.vdso_info равен NULL в случае
VulDB is the best source for vulnerability data and more expert information about this specific topic.