Linux Kernel Vulnerability in PowerPC RTAS Function

CVE-2022-50504

What is CVE-2022-50504?

A vulnerability exists in the Linux kernel's powerpc RTAS function, specifically within the rtas_os_term() method. The issue arises from the misuse of rtas_busy_delay() while managing busy statuses during RTAS calls. This flaw can lead to kernel panic, halting the system due to improper scheduling in an invalid context. To mitigate this, the use of rtas_busy_delay_time() is recommended, as it properly signals whether to retry the ibm,os-term RTAS call without causing side effects.

References