What’s Vulnerable › Vulnerabilities

CVE-2022-50879: objtool: Fix SEGFAULT

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix SEGFAULT find_insn() will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference.

Affected products

• Linux kernel: from 4.9.106 before 4.10; from 4.14.48 before 4.15; from 4.16.14 before 4.17; 4.17 — fixed in 4.10, 4.15, 4.17, 6.2

How to fix

Upgrade to a fixed version: Linux kernel 4.10, 4.15, 4.17, 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0af0e115ff59d638f45416a004cdd8edb38db40c
• https://git.kernel.org/stable/c/23a249b1185cdd5bfb6971d1608ba49e589f2288
• https://git.kernel.org/stable/c/38b9415abbd703438ebbc6fb74990bd0fbddc5b9
• https://git.kernel.org/stable/c/418ef921cce2d7415fab7e3e93529227f239e4bb
• https://git.kernel.org/stable/c/efb11fdb3e1a9f694fa12b70b21e69e55ec59c36
• https://git.kernel.org/stable/c/fcee8a2d4db404a93e690d79e7273b6ef9d33575

Get alerted when CVE-2022-50879 or the next vulnerability affects your stack