CVE-2022-50200

selinux: Add boundary check in put_entry()

State: Published
Severity: 7.8 High
Published: Jun 18, 2025
Updated: Oct 15, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

selinux: Add boundary check in put_entry()

Just like next_entry(), boundary check is necessary to prevent memory out-of-bound access.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 2dabe6a872a5744865372eb30ea51e8ccd21305aAffected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 477722f31ad73aa779154d1d7e00825538389f76Affected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 90bdf50ae70c5571a277b5601e4f5df210831e0aAffected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before adbfdaacde18faf6cd4e490764045375266b3fbdAffected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 7363a69d8ca8f0086f8e1196c8ddaf0e168614b1Affected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 9605f50157cae00eb299e1189a6d708c84935ad8Affected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before dedd558d9765b72c66e5a53948e9f5abc3ece1f6Affected cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 15ec76fb29be31df2bccb30fc09875274cba2776Affected
LinuxLinux	2.6.37Affected before 2.6.37Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.137 through 5.10.Not affected 5.15.61 through 5.15.Not affected 5.18.18 through 5.18.Not affected 5.19.2 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 2dabe6a872a5744865372eb30ea51e8ccd21305aAffected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 477722f31ad73aa779154d1d7e00825538389f76Affected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 90bdf50ae70c5571a277b5601e4f5df210831e0aAffected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before adbfdaacde18faf6cd4e490764045375266b3fbdAffected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 7363a69d8ca8f0086f8e1196c8ddaf0e168614b1Affected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 9605f50157cae00eb299e1189a6d708c84935ad8Affected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before dedd558d9765b72c66e5a53948e9f5abc3ece1f6Affected
cee74f47a6baba0ac457e87687fdcf0abd599f0a to before 15ec76fb29be31df2bccb30fc09875274cba2776Affected

LinuxLinux

2.6.37Affected
before 2.6.37Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.137 through 5.10.*Not affected
5.15.61 through 5.15.*Not affected
5.18.18 through 5.18.*Not affected
5.19.2 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.