CVE-2022-50870

powerpc/rtas: avoid device tree lookups in rtas_os_term()

published December 30, 2025

CVSS
—
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

powerpc/rtas: avoid device tree lookups in rtas_os_term()

rtas_os_term() is called during panic. Its behavior depends on a couple

of conditions in the /rtas node of the device tree, the traversal of

which entails locking and local IRQ state changes. If the kernel panics

while devtree_lock is held, rtas_os_term() as currently written could

hang.

Instead of discovering the relevant characteristics at panic time,

cache them in file-static variables at boot. Note the lookup for

"ibm,extended-os-term" is converted to of_property_read_bool() since it

is a boolean property, not an RTAS function token.

[mpe: Incorporate suggested change from Nick]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Published
2025-12-30T12:15Z
EPSS history
Timeline
  • 30 DEC 12:15Z
    powerpc/rtas: avoid device tree lookups in rtas_os_term()
    cvelistv5