Riskcovery

CVE-2022-50812

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_ZERO_CALL_USED_REGS to either a supported GCC version or a clang newer than 15.0.6, which will catch both a theoretical 15.0.7 and the upcoming 16.0.0, which will both have the bug fixed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to before 8a4236456a3a402f6bb92aa7b75e7a3b4ef7a72cAffected
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to before 0b202dfedb5aa2e7d07d849be33fa3a48c026926Affected
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to before 21ca0bfa11bbb9a9207f5d2104f47d3d71b4616eAffected
  • a82adfd5c7cb4b8bb37ef439aed954f9972bb618 to before d6a9fb87e9d18f3394a9845546bbe868efdccfd2Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.