01 Record

CVE-2022-50497

binfmt_misc: fix shift-out-of-bounds in check_special_flags

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

binfmt_misc: fix shift-out-of-bounds in check_special_flags

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.8% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-04 15:43Z11 MO AGO

Last updated

2026-05-11 19:20Z3 MO AGO

Reserved

2025-10-04

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase
CWE-681Incorrect Conversion between Numeric TypesBase

Data version

5.2

Document digest

b6d47ccb38961773a477cfda7701dc9bac8d69959b4caec113462fcf00ee3a52

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0f1a48994b3e516d5c7fd5d12204fdba7a604771, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ea6145370be8016755c43aca799815fc4b8c88b1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 97382a2639b1cd9631f6069061e9d7062cd2b098, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 419b808504c26b3e3342365f34ccd0843e09a7f8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dcbc51d31d0afbd45e830e3cf565a7b3ca7bf0d8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 88cea1676a09f7c45a1438153a126610c33b1590, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a651bb5ff997b9f02662bcdef3d8b4e6f0d79656, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a91123d4bda463469f68f0427adabf8108001f94, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6a46bf558803dd2b959ca7435a5c143efe837217, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0f1a48994b3e516d5c7fd5d12204fdba7a604771
git.kernel.orghttps://git.kernel.org/stable/c/ea6145370be8016755c43aca799815fc4b8c88b1
git.kernel.orghttps://git.kernel.org/stable/c/97382a2639b1cd9631f6069061e9d7062cd2b098
git.kernel.orghttps://git.kernel.org/stable/c/419b808504c26b3e3342365f34ccd0843e09a7f8
git.kernel.orghttps://git.kernel.org/stable/c/dcbc51d31d0afbd45e830e3cf565a7b3ca7bf0d8
git.kernel.orghttps://git.kernel.org/stable/c/88cea1676a09f7c45a1438153a126610c33b1590
git.kernel.orghttps://git.kernel.org/stable/c/a651bb5ff997b9f02662bcdef3d8b4e6f0d79656
git.kernel.orghttps://git.kernel.org/stable/c/a91123d4bda463469f68f0427adabf8108001f94
git.kernel.orghttps://git.kernel.org/stable/c/6a46bf558803dd2b959ca7435a5c143efe837217

01 Record index

CVE-2022-50497

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-50497

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References