{
  "cveId": "CVE-2022-50648",
  "url": "https://patchblox.com/security/cve/CVE-2022-50648",
  "summary": "CVE-2022-50648 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50648, released December 9, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ftrace: Fix recursive locking direct_mutex in ft...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller  Naveen reported recursive locking of direct_mutex with sample ftrace-direct-modify.ko:  [   74.762406] WARNING: possible recursive locking detected [   74.762887] 6.0.0-rc6\u002B #33 Not tainted [   74.763216] -------------------------------------------- [   74.763672] event-sample-fn/1084 is trying to acquire lock: [   74.764152] ffffffff86c9d6b0 (direct_mutex){\u002B.\u002B.}-{3:3}, at: \\     register_ftrace_function\u002B0x1f/0x180 [   74.764922] [   74.764922] but task is already holding lock: [   74.765421] ffffffff86c9d6b0 (direct_mutex){\u002B.\u002B.}-{3:3}, at: \\     modify_ftrace_direct\u002B0x34/0x1f0 [   74.766142] [   74.766142] other info that might help us debug this: [   74.766701]  Possible unsafe locking scenario: [   74.766701] [   74.767216]        CPU0 [   74.767437]        ---- [   74.767656]   lock(direct_mutex); [   74.767952]   lock(direct_mutex); [   74.768245] [   74.768245]  *** DEADLOCK *** [   74.768245] [   74.768750]  May be due to missing lock nesting notation [   74.768750] [   74.769332] 1 lock held by event-sample-fn/1084: [   74.769731]  #0: ffffffff86c9d6b0 (direct_mutex){\u002B.\u002B.}-{3:3}, at: \\     modify_ftrace_direct\u002B0x34/0x1f0 [   74.770496] [   74.770496] stack backtrace: [   74.770884] CPU: 4 PID: 1084 Comm: event-sample-fn Not tainted ... [   74.771498] Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), ... [   74.772474] Call Trace: [   74.772696]  \u003CTASK\u003E [   74.772896]  dump_stack_lvl\u002B0x44/0x5b [   74.773223]  __lock_acquire.cold.74\u002B0xac/0x2b7 [   74.773616]  lock_acquire\u002B0xd2/0x310 [   74.773936]  ? register_ftrace_function\u002B0x1f/0x180 [   74.774357]  ? lock_is_held_type\u002B0xd8/0x130 [   74.774744]  ? my_tramp2\u002B0x11/0x11 [ftrace_direct_modify] [   74.775213]  __mutex_lock\u002B0x99/0x1010 [   74.775536]  ? register_ftrace_function\u002B0x1f/0x180 [   74.775954]  ? slab_free_freelist_hook.isra.43\u002B0x115/0x160 [   74.776424]  ? ftrace_set_hash\u002B0x195/0x220 [   74.776779]  ? register_ftrace_function\u002B0x1f/0x180 [   74.777194]  ? kfree\u002B0x3e1/0x440 [   74.777482]  ? my_tramp2\u002B0x11/0x11 [ftrace_direct_modify] [   74.777941]  ? __schedule\u002B0xb40/0xb40 [   74.778258]  ? register_ftrace_function\u002B0x1f/0x180 [   74.778672]  ? my_tramp1\u002B0xf/0xf [ftrace_direct_modify] [   74.779128]  register_ftrace_function\u002B0x1f/0x180 [   74.779527]  ? ftrace_set_filter_ip\u002B0x33/0x70 [   74.779910]  ? __schedule\u002B0xb40/0xb40 [   74.780231]  ? my_tramp1\u002B0xf/0xf [ftrace_direct_modify] [   74.780678]  ? my_tramp2\u002B0x11/0x11 [ftrace_direct_modify] [   74.781147]  ftrace_modify_direct_caller\u002B0x5b/0x90 [   74.781563]  ? 0xffffffffa0201000 [   74.781859]  ? my_tramp1\u002B0xf/0xf [ftrace_direct_modify] [   74.782309]  modify_ftrace_direct\u002B0x1b2/0x1f0 [   74.782690]  ? __schedule\u002B0xb40/0xb40 [   74.783014]  ? simple_thread\u002B0x2a/0xb0 [ftrace_direct_modify] [   74.783508]  ? __schedule\u002B0xb40/0xb40 [   74.783832]  ? my_tramp2\u002B0x11/0x11 [ftrace_direct_modify] [   74.784294]  simple_thread\u002B0x76/0xb0 [ftrace_direct_modify] [   74.784766]  kthread\u002B0xf5/0x120 [   74.785052]  ? kthread_complete_and_exit\u002B0x20/0x20 [   74.785464]  ret_from_fork\u002B0x22/0x30 [   74.785781]  \u003C/TASK\u003E  Fix this by using register_ftrace_function_nolock in ftrace_modify_direct_caller.",
  "published": "2025-12-09T01:16:47Z",
  "severity": "",
  "epss": 0.00185,
  "epssPercentile": 0.08117,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.3-1",
      "fix": "DEBIAN-CVE-2022-50648",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50648",
      "released": "2025-12-09T01:16:47Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.3-1",
      "fix": "DEBIAN-CVE-2022-50648",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50648",
      "released": "2025-12-09T01:16:47Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.3-1",
      "fix": "DEBIAN-CVE-2022-50648",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50648",
      "released": "2025-12-09T01:16:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}