{
  "cveId": "CVE-2022-50224",
  "url": "https://patchblox.com/security/cve/CVE-2022-50224",
  "summary": "CVE-2022-50224 is fixed in 47 products on 1 platform, first by RHSA-2023:2458, released May 9, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT  Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled (mindblowing) and trigger the WARN that fires on reserved SPTE bits being set.  KVM has required NX support for SVM since commit b26a71a1a5b9 (\u0022KVM: SVM: Refuse to load kvm_amd if NX support is not available\u0022) for exactly this reason, but apparently it never occurred to anyone to actually test NPT with the mitigation enabled.    ------------[ cut here ]------------   spte = 0x800000018a600ee7, level = 2, rsvd bits = 0x800f0000001fe000   WARNING: CPU: 152 PID: 15966 at arch/x86/kvm/mmu/spte.c:215 make_spte\u002B0x327/0x340 [kvm]   Hardware name: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 10.48.0 01/27/2022   RIP: 0010:make_spte\u002B0x327/0x340 [kvm]   Call Trace:    \u003CTASK\u003E    tdp_mmu_map_handle_target_level\u002B0xc3/0x230 [kvm]    kvm_tdp_mmu_map\u002B0x343/0x3b0 [kvm]    direct_page_fault\u002B0x1ae/0x2a0 [kvm]    kvm_tdp_page_fault\u002B0x7d/0x90 [kvm]    kvm_mmu_page_fault\u002B0xfb/0x2e0 [kvm]    npf_interception\u002B0x55/0x90 [kvm_amd]    svm_invoke_exit_handler\u002B0x31/0xf0 [kvm_amd]    svm_handle_exit\u002B0xf6/0x1d0 [kvm_amd]    vcpu_enter_guest\u002B0xb6d/0xee0 [kvm]    ? kvm_pmu_trigger_event\u002B0x6d/0x230 [kvm]    vcpu_run\u002B0x65/0x2c0 [kvm]    kvm_arch_vcpu_ioctl_run\u002B0x355/0x610 [kvm]    kvm_vcpu_ioctl\u002B0x551/0x610 [kvm]    __se_sys_ioctl\u002B0x77/0xc0    __x64_sys_ioctl\u002B0x1d/0x20    do_syscall_64\u002B0x44/0xa0    entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0    \u003C/TASK\u003E   ---[ end trace 0000000000000000 ]---",
  "published": "2023-05-09T00:00:00Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.002,
  "epssPercentile": 0.09901,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-50224",
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 9",
      "fixedVersion": "0:7.0.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64k-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-uki-virt",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uki-virt",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel-matched",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-core",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.19.6-1",
      "fix": "DEBIAN-CVE-2022-50224",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50224",
      "released": "2025-06-18T11:15:53Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.19.6-1",
      "fix": "DEBIAN-CVE-2022-50224",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50224",
      "released": "2025-06-18T11:15:53Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.19.6-1",
      "fix": "DEBIAN-CVE-2022-50224",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50224",
      "released": "2025-06-18T11:15:53Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rtla",
      "release": "RHEL 9",
      "fixedVersion": "0:5.14.0-284.11.1.el9_2",
      "fix": "RHSA-2023:2458",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-2458",
      "released": "2023-05-09T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}