CVE-2022-50879 - objtool: Fix SEGFAULT

objtool: Fix SEGFAULT

Published Dec 30, 2025

No CVSS score

EPSS 0.21%

Description

find_insn() will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
  -
Vendor Linux Product Linux Default
unaffected
- Version
  4.14.48
  Status
  affected
  Constraints
  <4.15
- Version
  4.16.14
  Status
  affected
  Constraints
  <4.17
- Version
  4.9.106
  Status
  affected
  Constraints
  <4.10
Vendor Linux Product Linux Default
affected
- Version
  4.17
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.17
- Version
  5.10.163
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.87
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.229
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.0.17
  Status
  unaffected
  Constraints
  <=6.0.*
- Version
  6.1.3
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.2
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected	-
	affected	-
	affected	-

Linux

unaffected

Version	Status	Constraints
4.14.48	affected	<4.15
4.16.14	affected	<4.17
4.9.106	affected	<4.10

Linux

affected

Version	Status	Constraints
4.17	affected	-
0	unaffected	<4.17
5.10.163	unaffected	<=5.10.*
5.15.87	unaffected	<=5.15.*
5.4.229	unaffected	<=5.4.*
6.0.17	unaffected	<=6.0.*
6.1.3	unaffected	<=6.1.*
6.2	unaffected	<=*

Red Hat Enterprise Linux 9

kernel-0:5.14.0-427.13.1.el9_4

Fixed · RHSA-2024:2394
Red Hat Enterprise Linux 9

kernel-0:5.14.0-427.13.1.el9_4

Fixed · RHSA-2024:2394
Red Hat Enterprise Linux 9.2 Extended Update Support

kernel-0:5.14.0-284.48.1.el9_2

Fixed · RHSA-2024:0448
Red Hat Enterprise Linux 9.2 Extended Update Support

kernel-rt-0:5.14.0-284.48.1.rt14.333.el9_2

Fixed · RHSA-2024:0439
Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 9	kernel-0:5.14.0-427.13.1.el9_4	Fixed	RHSA-2024:2394
Red Hat Enterprise Linux 9	kernel-0:5.14.0-427.13.1.el9_4	Fixed	RHSA-2024:2394
Red Hat Enterprise Linux 9.2 Extended Update Support	kernel-0:5.14.0-284.48.1.el9_2	Fixed	RHSA-2024:0448
Red Hat Enterprise Linux 9.2 Extended Update Support	kernel-rt-0:5.14.0-284.48.1.rt14.333.el9_2	Fixed	RHSA-2024:0439
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

Red Hat statement

This is not a runtime kernel vulnerability. Objtool is a userspace build-time tool that runs during kernel compilation to validate object files. A crash in objtool affects the kernel build process only and has no impact on running systems. This should not be classified as a kernel security vulnerability.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (11)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-50879		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2426076		Issue Tracking
https://git.kernel.org/stable/c/0af0e115ff59d638f45416a004cdd8edb38db40c
https://git.kernel.org/stable/c/23a249b1185cdd5bfb6971d1608ba49e589f2288
https://git.kernel.org/stable/c/38b9415abbd703438ebbc6fb74990bd0fbddc5b9
https://git.kernel.org/stable/c/418ef921cce2d7415fab7e3e93529227f239e4bb
https://git.kernel.org/stable/c/efb11fdb3e1a9f694fa12b70b21e69e55ec59c36
https://git.kernel.org/stable/c/fcee8a2d4db404a93e690d79e7273b6ef9d33575
https://lore.kernel.org/linux-cve-announce/2025123024-CVE-2022-50879-47a7@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-50879
https://www.cve.org/CVERecord?id=CVE-2022-50879