LiveActive security incident?Get immediate response
CVE Record

CVE-2022-50812: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_ZERO_CALL_USED_REGS to either a supported GCC version or a clang newer than 15.0.6, which will catch both a theoretical 15.0.7 and the upcoming 16.0.0, which will both have the bug fixed.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2022-50812 is a Linux kernel build-configuration issue tied to a bad Clang implementation of a compiler hardening option. Affected kernels built with the unsafe compiler/config combination may hit NULL pointer dereferences. The public record does not show active exploitation, a CVSS score, or business-impact details beyond potential stability risk.

Executive priority

Treat as a targeted kernel maintenance item, not an emergency, unless you build custom Linux kernels with Clang. Prioritize validation for infrastructure using custom hardened kernels or recent 5.15/6.x kernels.

Technical view

The kernel fix restricts CONFIG_ZERO_CALL_USED_REGS so it is only available with supported GCC or Clang newer than 15.0.6. The vulnerable condition involves Clang’s -fzero-call-used-regs behavior causing NULL pointer dereferences. The source bundle lists Linux kernel stable references and affected 5.15/6.x-era versions, but lacks detailed trigger conditions.

Likely exposure

Exposure is most likely for organizations running self-built or vendor kernels compiled with Clang 15.0.6 or older and CONFIG_ZERO_CALL_USED_REGS enabled. Standard distro kernels may already include backports; confirm through vendor advisories and package changelogs.

Exploitation context

No provided source indicates active exploitation or a public exploit. The issue appears to be a build-time compiler/configuration flaw that can affect kernel runtime stability. Public details do not describe a remote attack path or privilege boundary crossing.

Researcher notes

The CVE record has limited metadata: no CVSS, CWE, or exploit evidence. Analysis should focus on the kernel build provenance, compiler version, and presence of the stable commits. Avoid assuming exploitability beyond NULL pointer dereference risk stated in the record.

Mitigation direction

  • Update to a vendor kernel containing the referenced stable fixes.
  • If rebuilding kernels, use supported GCC or Clang newer than 15.0.6.
  • Avoid enabling CONFIG_ZERO_CALL_USED_REGS with affected Clang versions.
  • Check Linux distribution advisories for backported fixes and package status.

Validation and detection

  • Identify kernel versions and vendor package build history.
  • Check whether CONFIG_ZERO_CALL_USED_REGS is enabled in deployed kernels.
  • Confirm the compiler version used for kernel builds.
  • Verify referenced stable commits or vendor backports are present.
Prepared
Confidence
medium
Sources
6

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2022-50812 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
5Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinuxa82adfd5c7cb4b8bb37ef439aed954f9972bb618, a82adfd5c7cb4b8bb37ef439aed954f9972bb618, a82adfd5c7cb4b8bb37ef439aed954f9972bb618, a82adfd5c7cb4b8bb37ef439aed954f9972bb618unaffected
LinuxLinux5.15, 0, 5.15.86, 6.0.16, 6.1.2, 6.2affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.