CVE catalog

CVE-2022-50224

linux: CVE-2022-50224

Severity: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Jan 1, 2022, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.20% · Oct 25, 2026

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled (mindblowing) and trigger the WARN that fires on reserved SPTE bits being set. KVM has required NX support for SVM since commit b26a71a1a5b9 ("KVM: SVM: Refuse to load kvm_amd if NX support is not available") for exactly this reason, but apparently it never occurred to anyone to actually test NPT with the mitigation enabled. ------------[ cut here ]------------ spte = 0x800000018a600ee7, level = 2, rsvd bits = 0x800f0000001fe000 WARNING: CPU: 152 PID: 15966 at arch/x86/kvm/mmu/spte.c:215 make_spte+0x327/0x340 [kvm] Hardware name: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 10.48.0 01/27/2022 RIP: 0010:make_spte+0x327/0x340 [kvm] Call Trace: <TASK> tdp_mmu_map_handle_target_level+0xc3/0x230 [kvm] kvm_tdp_mmu_map+0x343/0x3b0 [kvm] direct_page_fault+0x1ae/0x2a0 [kvm] kvm_tdp_page_fault+0x7d/0x90 [kvm] kvm_mmu_page_fault+0xfb/0x2e0 [kvm] npf_interception+0x55/0x90 [kvm_amd] svm_invoke_exit_handler+0x31/0xf0 [kvm_amd] svm_handle_exit+0xf6/0x1d0 [kvm_amd] vcpu_enter_guest+0xb6d/0xee0 [kvm] ? kvm_pmu_trigger_event+0x6d/0x230 [kvm] vcpu_run+0x65/0x2c0 [kvm] kvm_arch_vcpu_ioctl_run+0x355/0x610 [kvm] kvm_vcpu_ioctl+0x551/0x610 [kvm] __se_sys_ioctl+0x77/0xc0 __x64_sys_ioctl+0x1d/0x20 do_syscall_64+0x44/0xa0 entry_SYSCALL_64_after_hwframe+0x46/0xb0 </TASK> ---[ end trace 0000000000000000 ]---

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	linux	sid	`7.2.12-1`	fixed
Debian	linux	forky	`7.2.12-1`	fixed
Debian	linux	trixie	`6.12.107-1`	fixed
Debian	linux	trixie-security	`6.12.113-1`	fixed
Debian	linux	bookworm	`6.1.176-1`	fixed
Debian	linux	bookworm-security	`6.1.190-1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	linux	source	sid	`5.19.6-1`	not yet assigned	Not reported	Not reported
Debian	linux	source	forky	`5.19.6-1`	not yet assigned	Not reported	Not reported
Debian	linux	source	trixie	`5.19.6-1`	not yet assigned	Not reported	Not reported
Debian	linux	source	bookworm	`5.19.6-1`	not yet assigned	Not reported	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[bpftool]Unknown
Source package: [linux]
Details (6)
- 7.1.0+6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 7.1.0+6.1.176-1 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 7.5.0+6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 7.5.0+6.12.95-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 7.1.0+6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 7.1.0+6.1.180-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[hyperv-daemons]Unknown
Source package: [linux]
Details (6)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[intel-sdsi]Unknown
Source package: [linux]
Details (1)
- 6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[libcpupower1]Unknown
Source package: [linux]
Details (6)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[libcpupower-dev]Unknown
Source package: [linux]
Details (6)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-bpf-dev]Unknown
Source package: [linux]
Details (2)
- 6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-compiler-gcc-12-x86]Unknown
Source package: [linux]
Details (2)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-config-6.1]Unknown
Source package: [linux]
Details (4)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-cpupower]Unknown
Source package: [linux]
Details (6)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-doc]Unknown
Source package: [linux]
Details (32)
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.43-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.43-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.57-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.57-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.63-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.63-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.69-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.69-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.73-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.73-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.74-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.74-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.85-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.85-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.86-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.86-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.88-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.88-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.90-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.90-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.90-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.90-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.94-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.94-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.12.95-1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · all · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · all · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-doc-6.1]Unknown
Source package: [linux]
Details (6)
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.176-1 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · all · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.180-1 · all · bookworm-security
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-amd64]Unknown
Source package: [linux]
Details (1)
- 6.1.170-3 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-arm64]Unknown
Source package: [linux]
Details (1)
- 6.1.170-3 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-cloud-amd64]Unknown
Source package: [linux]
Details (1)
- 6.1.170-3 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-cloud-arm64]Unknown
Source package: [linux]
Details (1)
- 6.1.170-3 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-common]Unknown
Source package: [linux]
Details (2)
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-common-rt]Unknown
Source package: [linux]
Details (2)
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
- 6.1.170-3 · all · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-rt-amd64]Unknown
Source package: [linux]
Details (1)
- 6.1.170-3 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-47-rt-arm64]Unknown
Source package: [linux]
Details (1)
- 6.1.170-3 · arm64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm
[linux-headers-6.1.0-50-amd64]Unknown
Source package: [linux]
Details (1)
- 6.1.176-1 · amd64 · bookworm
  Fixed · Fixed: 5.19.6-1
  dsa · linux · debian · bookworm

Next results

Observed: Oct 23, 2026, 7:12:01 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]