HomeDefectsLIN1025-2040
Acknowledged

LIN1025-2040 : Security Advisory - linux - CVE-2022-50227

Created: Jun 18, 2025    Updated: Sep 4, 2026
Resolved Date: Jun 19, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]KVM: x86/xen: Initialize Xen timer only once[EOL][EOL]Add a check for existing xen timers before initializing a new one.[EOL][EOL]Currently kvm_xen_init_timer() is called on every[EOL]KVM_XEN_VCPU_ATTR_TYPE_TIMER, which is causing the following ODEBUG[EOL]crash when vcpu->arch.xen.timer is already set.[EOL][EOL]ODEBUG: init active (active state 0)[EOL]object type: hrtimer hint: xen_timer_callbac0[EOL]RIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:502[EOL]Call Trace:[EOL]__debug_object_init[EOL]debug_hrtimer_init[EOL]debug_init[EOL]hrtimer_init[EOL]kvm_xen_init_timer[EOL]kvm_xen_vcpu_set_attr[EOL]kvm_arch_vcpu_ioctl[EOL]kvm_vcpu_ioctl[EOL]vfs_ioctl

CREATE(Triage):(User=lchen-cn) [CVE-2022-50227 (https://nvd.nist.gov/vuln/detail/CVE-2022-50227)