objtool: Fix SEGFAULT (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 11 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: objtool: Fix SEGFAULT find_insn() will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference.
References
- https://git.kernel.org/stable/c/418ef921cce2d7415fab7e3e93529227f239e4bb
- https://git.kernel.org/stable/c/0af0e115ff59d638f45416a004cdd8edb38db40c
- https://git.kernel.org/stable/c/23a249b1185cdd5bfb6971d1608ba49e589f2288
- https://git.kernel.org/stable/c/38b9415abbd703438ebbc6fb74990bd0fbddc5b9
- https://git.kernel.org/stable/c/fcee8a2d4db404a93e690d79e7273b6ef9d33575
- https://git.kernel.org/stable/c/efb11fdb3e1a9f694fa12b70b21e69e55ec59c36
European references
- ENISA EUVD · EUVD-2022-55917
- GCVE · GCVE-0-2022-50879
CERT-FR advisories
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 13810435b9a7014fb92eb715f77da488f3b65b99 < 418ef921cce2d7415fab7e3e93529227f239e4bb ; affected 13810435b9a7014fb92eb715f77da488f3b65b99 < 0af0e115ff59d638f45416a004cdd8edb38db40c ; affected 13810435b9a7014fb92eb715f77da488f3b65b99 < 23a249b1185cdd5bfb6971d1608ba49e589f2288 ; affected 13810435b9a7014fb92eb715f77da488f3b65b99 < 38b9415abbd703438ebbc6fb74990bd0fbddc5b9 ; affected 13810435b9a7014fb92eb715f77da488f3b65b99 < fcee8a2d4db404a93e690d79e7273b6ef9d33575 ; affected 13810435b9a7014fb92eb715f77da488f3b65b99 < efb11fdb3e1a9f694fa12b70b21e69e55ec59c36 |
| Linux · Linux | affected 4.17 ; unaffected 0 < 4.17 ; unaffected 5.4.229 ≤ 5.4.* ; unaffected 5.10.163 ≤ 5.10.* ; unaffected 5.15.87 ≤ 5.15.* ; unaffected 6.0.17 ≤ 6.0.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |