Cloudanix VulnDB

CVE-2022-50879

None

CVSS

—

EPSS

0.2%

Published

Dec 30, 2025

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A missing safety check in a kernel build tool can make the tool crash when given bad data, slowing down software builds.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Moderate
Impact
Denial Of Service
Component
OS kernel
Class
Memory Corruption
Remediation
Patch
Effort
Low
Patch risk
Low

What it actually does

Missing NULL check after find_insn() allows NULL pointer dereference leading to kernel oops/segfault in objtool.

Why it matters to the business

Build-time tooling crash can interrupt kernel compilation or validation pipelines, causing developer downtime and delayed releases in affected OSS projects.

How an attack unfolds

An attacker supplies malformed input that causes find_insn() to return NULL; the absent check then dereferences the pointer and triggers a segmentation fault.

How to fix it

Upgrade hdf5 (OSS-Fuzz) to commit 7cc8b5e1010a09c892bc97ac32d9515c3777ce07 or later; rebuild and re-validate kernels using the patched objtool.

How to confirm the fix worked

Confirm objtool binary contains the NULL check after find_insn() call and that compilation succeeds without segfault on previously crashing inputs.

Typical attack path

  1. Craft input that forces find_insn() failure path
  2. Invoke objtool processing on the input
  3. Trigger NULL dereference resulting in process crash

How to detect it

Scan build logs for objtool segmentation fault messages and kernel oops entries containing find_insn references.

What your security team should do

  • Apply the listed commit to all affected build environments immediately
  • Add objtool crash monitoring to CI pipelines
  • Review downstream dependents of hdf5 for similar build tooling exposure

The record

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix SEGFAULT find_insn() will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference.

Affected packages

Ecosystem Package Introduced Fixed
Linux Kernel 0 5.4.229
Linux Kernel 4.17.0 5.4.229

Related vulnerabilities