Linux Kernel Vulnerability Affecting ARM64 Architecture

CVE-2022-50230

What is CVE-2022-50230?

A vulnerability in the Linux kernel affects ARM64 systems where read/write access to the idmap is improperly managed due to the absence of UXN being set on swapper page tables. This oversight can lead to kernel panics when the system attempts to access specific mappings, notably __idmap_kpti_flag. A fix was introduced to address this issue, ensuring that UXN is applied correctly on the impacted page table entries to bolster system stability and security.

References