CVE-2022-50091

CVE-2022-50091 concerns the Linux kernel where the boot-time parameter csdlock_debug was parsed via early_param, enabling static_branch in a manner that could dereference NULL under specific sparse memory configurations (arm64 with CONFIG_SPARSEMEM and SPARSEMEM_VMEMMAP settings, and powerpc due ...

CVE-2022-50091 locking/csd_lock: Change csdlock_debug from early_param to __setup

In the Linux kernel, the following vulnerability has been resolved: locking/csdlock: Change csdlockdebug from earlyparam to setup The csdlockdebug kernel-boot parameter is parsed by the earlyparam function csdlockdebug. If set, csdlockdebug invokes staticbranchenable to enable csdlockwait feature...