In the Linux kernel, the following vulnerability has been resolved: rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() Running rcutorture with non-zero fqs_duration module parameter in a kernel built with CONFIG_PREEMPTION=y results in the following splat: BUG: using __this_cpu_read() in preemptible [00000000] code: rcu_torture_fqs/398 caller is __this_cpu_preempt_check+0x13/0x20 CPU: 3 PID: 398 Comm: rcu_torture_fqs Not tainted 6.0.0-rc1-yoctodev-standard+ Call Trace: <TASK> dump_stack_lvl+0x5b/0x86 dump_stack+0x10/0x16 check_preemption_disabled+0xe5/0xf0 __this_cpu_preempt_check+0x13/0x20 rcu_force_quiescent_state.part.0+0x1c/0x170 rcu_force_quiescent_state+0x1e/0x30 rcu_torture_fqs+0xca/0x160 ? rcu_torture_boost+0x430/0x430 kthread+0x192/0x1d0 ? kthread_complete_and_exit+0x30/0x30 ret_from_fork+0x22/0x30 </TASK> The problem is that rcu_force_quiescent_state() uses __this_cpu_read() in preemptible code instead of the proper raw_cpu_read(). This commit therefore changes __this_cpu_read() to raw_cpu_read().

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013633 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()

    Running rcutorture with non-zero fqs_duration module parameter in a     kernel built with CONFIG_PREEMPTION=y results in the following splat:

    BUG: using __this_cpu_read() in preemptible [00000000]     code: rcu_torture_fqs/398     caller is __this_cpu_preempt_check+0x13/0x20     CPU: 3 PID: 398 Comm: rcu_torture_fqs Not tainted 6.0.0-rc1-yoctodev-standard+     Call Trace:
    <TASK>     dump_stack_lvl+0x5b/0x86     dump_stack+0x10/0x16     check_preemption_disabled+0xe5/0xf0
    __this_cpu_preempt_check+0x13/0x20     rcu_force_quiescent_state.part.0+0x1c/0x170     rcu_force_quiescent_state+0x1e/0x30     rcu_torture_fqs+0xca/0x160     ? rcu_torture_boost+0x430/0x430     kthread+0x192/0x1d0     ? kthread_complete_and_exit+0x30/0x30     ret_from_fork+0x22/0x30     </TASK>

    The problem is that rcu_force_quiescent_state() uses __this_cpu_read()     in preemptible code instead of the proper raw_cpu_read().  This commit     therefore changes __this_cpu_read() to raw_cpu_read().

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011286 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()

    Running rcutorture with non-zero fqs_duration module parameter in a     kernel built with CONFIG_PREEMPTION=y results in the following splat:

    BUG: using __this_cpu_read() in preemptible [00000000]     code: rcu_torture_fqs/398     caller is __this_cpu_preempt_check+0x13/0x20     CPU: 3 PID: 398 Comm: rcu_torture_fqs Not tainted 6.0.0-rc1-yoctodev-standard+     Call Trace:
    <TASK>     dump_stack_lvl+0x5b/0x86     dump_stack+0x10/0x16     check_preemption_disabled+0xe5/0xf0
    __this_cpu_preempt_check+0x13/0x20     rcu_force_quiescent_state.part.0+0x1c/0x170     rcu_force_quiescent_state+0x1e/0x30     rcu_torture_fqs+0xca/0x160     ? rcu_torture_boost+0x430/0x430     kthread+0x192/0x1d0     ? kthread_complete_and_exit+0x30/0x30     ret_from_fork+0x22/0x30     </TASK>

    The problem is that rcu_force_quiescent_state() uses __this_cpu_read()     in preemptible code instead of the proper raw_cpu_read().  This commit     therefore changes __this_cpu_read() to raw_cpu_read().

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() Running rcutorture with non-zero     fqs_duration module parameter in a kernel built with CONFIG_PREEMPTION=y results in the following splat:
    BUG: using __this_cpu_read() in preemptible [00000000] code: rcu_torture_fqs/398 caller is
    __this_cpu_preempt_check+0x13/0x20 CPU: 3 PID: 398 Comm: rcu_torture_fqs Not tainted 6.0.0-rc1-yoctodev-     standard+ Call Trace: <TASK> dump_stack_lvl+0x5b/0x86 dump_stack+0x10/0x16     check_preemption_disabled+0xe5/0xf0 __this_cpu_preempt_check+0x13/0x20     rcu_force_quiescent_state.part.0+0x1c/0x170 rcu_force_quiescent_state+0x1e/0x30 rcu_torture_fqs+0xca/0x160     ? rcu_torture_boost+0x430/0x430 kthread+0x192/0x1d0 ? kthread_complete_and_exit+0x30/0x30     ret_from_fork+0x22/0x30 </TASK> The problem is that rcu_force_quiescent_state() uses __this_cpu_read() in     preemptible code instead of the proper raw_cpu_read(). This commit therefore changes __this_cpu_read() to     raw_cpu_read(). (CVE-2022-50771)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
309578	Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013633)	Nessus	Unity Linux Local Security Checks	medium
308782	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011286)	Nessus	Unity Linux Local Security Checks	medium
279887	Linux Distros Unpatched Vulnerability : CVE-2022-50771	Nessus	Misc.	medium
171848	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2023-042 (ALASKERNEL-5.4-2023-042)	Nessus	Amazon Linux Local Security Checks	high
171216	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2023-026 (ALASKERNEL-5.10-2023-026)	Nessus	Amazon Linux Local Security Checks	high
170458	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2023-012 (ALASKERNEL-5.15-2023-012)	Nessus	Amazon Linux Local Security Checks	high
151965	Photon OS 4.0: Linux PHSA-2021-4.0-0065	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2022-50771

medium

Tenable Plugins

medium

medium

medium

high

high

high

high