CVE-2022-50870

powerpc/rtas: avoid device tree lookups in rtas_os_term()

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/rtas: avoid device tree lookups in rtas_os_term()

rtas_os_term() is called during panic. Its behavior depends on a couple of conditions in the /rtas node of the device tree, the traversal of which entails locking and local IRQ state changes. If the kernel panics while devtree_lock is held, rtas_os_term() as currently written could hang.

Instead of discovering the relevant characteristics at panic time, cache them in file-static variables at boot. Note the lookup for "ibm,extended-os-term" is converted to of_property_read_bool() since it is a boolean property, not an RTAS function token.

[mpe: Incorporate suggested change from Nick]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	088186ded490ced80758200cf8f906ed741df306 to before e23822c7381c59d9e42e65771b6e17c71ed30ea7Affected 088186ded490ced80758200cf8f906ed741df306 to before 06a07fbb32b3a23eec20a42b1e64474da0a3b33eAffected 088186ded490ced80758200cf8f906ed741df306 to before c2fa91abf22a705cf02f886cd99cff41f4ceda60Affected 088186ded490ced80758200cf8f906ed741df306 to before f2167f10fcca68ab9ae3f8d94d2c704c5541ac69Affected 088186ded490ced80758200cf8f906ed741df306 to before d8939315b7342860df143afe0adda6212cdd3193Affected 088186ded490ced80758200cf8f906ed741df306 to before 698e682c849e356fb47a8be47ca8baa817cf31e0Affected 088186ded490ced80758200cf8f906ed741df306 to before 464d10e8d797454e16a173ef1292a446b2adf21cAffected 088186ded490ced80758200cf8f906ed741df306 to before ed2213bfb192ab51f09f12e9b49b5d482c6493f3Affected
LinuxLinux	2.6.16Affected before 2.6.16Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.87 through 5.15.Not affected 6.0.17 through 6.0.Not affected 6.1.3 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

088186ded490ced80758200cf8f906ed741df306 to before e23822c7381c59d9e42e65771b6e17c71ed30ea7Affected
088186ded490ced80758200cf8f906ed741df306 to before 06a07fbb32b3a23eec20a42b1e64474da0a3b33eAffected
088186ded490ced80758200cf8f906ed741df306 to before c2fa91abf22a705cf02f886cd99cff41f4ceda60Affected
088186ded490ced80758200cf8f906ed741df306 to before f2167f10fcca68ab9ae3f8d94d2c704c5541ac69Affected
088186ded490ced80758200cf8f906ed741df306 to before d8939315b7342860df143afe0adda6212cdd3193Affected
088186ded490ced80758200cf8f906ed741df306 to before 698e682c849e356fb47a8be47ca8baa817cf31e0Affected
088186ded490ced80758200cf8f906ed741df306 to before 464d10e8d797454e16a173ef1292a446b2adf21cAffected
088186ded490ced80758200cf8f906ed741df306 to before ed2213bfb192ab51f09f12e9b49b5d482c6493f3Affected

LinuxLinux

2.6.16Affected
before 2.6.16Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.87 through 5.15.*Not affected
6.0.17 through 6.0.*Not affected
6.1.3 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.