Vulnerability-Lookup

GHSA-26MJ-55WJ-FJPQ

Vulnerability from github – Published: 2025-06-18 12:30 – Updated: 2025-11-19 15:31

Details

In the Linux kernel, the following vulnerability has been resolved:

selinux: Add boundary check in put_entry()

Just like next_entry(), boundary check is necessary to prevent memory out-of-bound access.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-50200"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-125"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-18T11:15:50Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: Add boundary check in put_entry()\n\nJust like next_entry(), boundary check is necessary to prevent memory\nout-of-bound access.",
  "id": "GHSA-26mj-55wj-fjpq",
  "modified": "2025-11-19T15:31:30Z",
  "published": "2025-06-18T12:30:55Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50200"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/15ec76fb29be31df2bccb30fc09875274cba2776"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2dabe6a872a5744865372eb30ea51e8ccd21305a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/477722f31ad73aa779154d1d7e00825538389f76"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7363a69d8ca8f0086f8e1196c8ddaf0e168614b1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/90bdf50ae70c5571a277b5601e4f5df210831e0a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9605f50157cae00eb299e1189a6d708c84935ad8"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/adbfdaacde18faf6cd4e490764045375266b3fbd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/dedd558d9765b72c66e5a53948e9f5abc3ece1f6"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2022-50200 (GCVE-0-2022-50200)

Vulnerability from cvelistv5 – Published: 2025-06-18 11:03 – Updated: 2026-05-11 19:14

Title

selinux: Add boundary check in put_entry()

Summary

In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in put_entry() Just like next_entry(), boundary check is necessary to prevent memory out-of-bound access.

Severity

No CVSS data available.

Assigner

Linux

References

8 references

URL	Tags
https://git.kernel.org/stable/c/2dabe6a872a574486…
https://git.kernel.org/stable/c/477722f31ad73aa77…
https://git.kernel.org/stable/c/90bdf50ae70c5571a…
https://git.kernel.org/stable/c/adbfdaacde18faf6c…
https://git.kernel.org/stable/c/7363a69d8ca8f0086…
https://git.kernel.org/stable/c/9605f50157cae00eb…
https://git.kernel.org/stable/c/dedd558d9765b72c6…
https://git.kernel.org/stable/c/15ec76fb29be31df2…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < 2dabe6a872a5744865372eb30ea51e8ccd21305a (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < 477722f31ad73aa779154d1d7e00825538389f76 (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < 90bdf50ae70c5571a277b5601e4f5df210831e0a (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < adbfdaacde18faf6cd4e490764045375266b3fbd (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < 7363a69d8ca8f0086f8e1196c8ddaf0e168614b1 (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < 9605f50157cae00eb299e1189a6d708c84935ad8 (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < dedd558d9765b72c66e5a53948e9f5abc3ece1f6 (git) Affected: cee74f47a6baba0ac457e87687fdcf0abd599f0a , < 15ec76fb29be31df2bccb30fc09875274cba2776 (git)
Linux	Linux	Affected: 2.6.37 Unaffected: 0 , < 2.6.37 (semver) Unaffected: 4.14.291 , ≤ 4.14.* (semver) Unaffected: 4.19.256 , ≤ 4.19.* (semver) Unaffected: 5.4.211 , ≤ 5.4.* (semver) Unaffected: 5.10.137 , ≤ 5.10.* (semver) Unaffected: 5.15.61 , ≤ 5.15.* (semver) Unaffected: 5.18.18 , ≤ 5.18.* (semver) Unaffected: 5.19.2 , ≤ 5.19.* (semver) Unaffected: 6.0 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "security/selinux/ss/policydb.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2dabe6a872a5744865372eb30ea51e8ccd21305a",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "477722f31ad73aa779154d1d7e00825538389f76",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "90bdf50ae70c5571a277b5601e4f5df210831e0a",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "adbfdaacde18faf6cd4e490764045375266b3fbd",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "7363a69d8ca8f0086f8e1196c8ddaf0e168614b1",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "9605f50157cae00eb299e1189a6d708c84935ad8",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "dedd558d9765b72c66e5a53948e9f5abc3ece1f6",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            },
            {
              "lessThan": "15ec76fb29be31df2bccb30fc09875274cba2776",
              "status": "affected",
              "version": "cee74f47a6baba0ac457e87687fdcf0abd599f0a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "security/selinux/ss/policydb.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.37"
            },
            {
              "lessThan": "2.6.37",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.291",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.256",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.137",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.18",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.291",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.256",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.211",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.137",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.61",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.18",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.2",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: Add boundary check in put_entry()\n\nJust like next_entry(), boundary check is necessary to prevent memory\nout-of-bound access."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:14:43.654Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2dabe6a872a5744865372eb30ea51e8ccd21305a"
        },
        {
          "url": "https://git.kernel.org/stable/c/477722f31ad73aa779154d1d7e00825538389f76"
        },
        {
          "url": "https://git.kernel.org/stable/c/90bdf50ae70c5571a277b5601e4f5df210831e0a"
        },
        {
          "url": "https://git.kernel.org/stable/c/adbfdaacde18faf6cd4e490764045375266b3fbd"
        },
        {
          "url": "https://git.kernel.org/stable/c/7363a69d8ca8f0086f8e1196c8ddaf0e168614b1"
        },
        {
          "url": "https://git.kernel.org/stable/c/9605f50157cae00eb299e1189a6d708c84935ad8"
        },
        {
          "url": "https://git.kernel.org/stable/c/dedd558d9765b72c66e5a53948e9f5abc3ece1f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/15ec76fb29be31df2bccb30fc09875274cba2776"
        }
      ],
      "title": "selinux: Add boundary check in put_entry()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50200",
    "datePublished": "2025-06-18T11:03:42.627Z",
    "dateReserved": "2025-06-18T10:57:27.428Z",
    "dateUpdated": "2026-05-11T19:14:43.654Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-26MJ-55WJ-FJPQ

CVE-2022-50200 (GCVE-0-2022-50200)

Tags

Sightings

Nomenclature