In the Linux kernel, the following vulnerability has been resolved: arm64: set UXN on swapper page tables [ This issue was fixed upstream by accident in c3cee924bd85 ("arm64: head: cover entire kernel image in initial ID map") as part of a large refactoring of the arm64 boot flow. This simple fix is therefore preferred for -stable backporting ] On a system that implements FEAT_EPAN, read/write access to the idmap is denied because UXN is not set on the swapper PTEs. As a result, idmap_kpti_install_ng_mappings panics the kernel when accessing __idmap_kpti_flag. Fix it by setting UXN on these PTEs.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - arm64: set UXN on swapper page tables [ This issue was fixed upstream by accident in c3cee924bd85 (arm64:
    head: cover entire kernel image in initial ID map) as part of a large refactoring of the arm64 boot flow.
    This simple fix is therefore preferred for -stable backporting ] On a system that implements FEAT_EPAN,     read/write access to the idmap is denied because UXN is not set on the swapper PTEs. As a result,     idmap_kpti_install_ng_mappings panics the kernel when accessing __idmap_kpti_flag. Fix it by setting UXN     on these PTEs. (CVE-2022-50232)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
244099	Linux Distros Unpatched Vulnerability : CVE-2022-50232	Nessus	Misc.	high
166118	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2022-008 (ALASKERNEL-5.15-2022-008)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2022-50232

high

Tenable Plugins

high

high