{
  "threat_severity" : "Low",
  "public_date" : "2025-12-24T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()",
    "id" : "2424969",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2424969"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-663",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\nselinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()\nThe following warning was triggered on a hardware environment:\nSELinux: Converting 162 SID table entries...\nBUG: sleeping function called from invalid context at\n__might_sleep+0x60/0x74 0x0\nin_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 5943, name: tar\nCPU: 7 PID: 5943 Comm: tar Tainted: P O 5.10.0 #1\nCall trace:\ndump_backtrace+0x0/0x1c8\nshow_stack+0x18/0x28\ndump_stack+0xe8/0x15c\n___might_sleep+0x168/0x17c\n__might_sleep+0x60/0x74\n__kmalloc_track_caller+0xa0/0x7dc\nkstrdup+0x54/0xac\nconvert_context+0x48/0x2e4\nsidtab_context_to_sid+0x1c4/0x36c\nsecurity_context_to_sid_core+0x168/0x238\nsecurity_context_to_sid_default+0x14/0x24\ninode_doinit_use_xattr+0x164/0x1e4\ninode_doinit_with_dentry+0x1c0/0x488\nselinux_d_instantiate+0x20/0x34\nsecurity_d_instantiate+0x70/0xbc\nd_splice_alias+0x4c/0x3c0\next4_lookup+0x1d8/0x200 [ext4]\n__lookup_slow+0x12c/0x1e4\nwalk_component+0x100/0x200\npath_lookupat+0x88/0x118\nfilename_lookup+0x98/0x130\nuser_path_at_empty+0x48/0x60\nvfs_statx+0x84/0x140\nvfs_fstatat+0x20/0x30\n__se_sys_newfstatat+0x30/0x74\n__arm64_sys_newfstatat+0x1c/0x2c\nel0_svc_common.constprop.0+0x100/0x184\ndo_el0_svc+0x1c/0x2c\nel0_svc+0x20/0x34\nel0_sync_handler+0x80/0x17c\nel0_sync+0x13c/0x140\nSELinux: Context system_u:object_r:pssp_rsyslog_log_t:s0:c0 is\nnot valid (left unmapped).\nIt was found that within a critical section of spin_lock_irqsave in\nsidtab_context_to_sid(), convert_context() (hooked by\nsidtab_convert_params.func) might cause the process to sleep via\nallocating memory with GFP_KERNEL, which is problematic.\nAs Ondrej pointed out [1], convert_context()/sidtab_convert_params.func\nhas another caller sidtab_convert_tree(), which is okay with GFP_KERNEL.\nTherefore, fix this problem by adding a gfp_t argument for\nconvert_context()/sidtab_convert_params.func and pass GFP_KERNEL/_ATOMIC\nproperly in individual callers.\n[PM: wrap long BUG() output lines, tweak subject line]" ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2023-11-14T00:00:00Z",
    "advisory" : "RHSA-2023:7077",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8",
    "package" : "kernel-0:4.18.0-513.5.1.el8_9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2023-11-07T00:00:00Z",
    "advisory" : "RHSA-2023:6583",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "kernel-0:5.14.0-362.8.1.el9_3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2023-11-07T00:00:00Z",
    "advisory" : "RHSA-2023:6583",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "package" : "kernel-0:5.14.0-362.8.1.el9_3"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2022-50699\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-50699\nhttps://lore.kernel.org/linux-cve-announce/2025122417-CVE-2022-50699-ddde@gregkh/T" ],
  "name" : "CVE-2022-50699",
  "csaw" : false
}