Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      CodeSOD: An Echo In Here in here

      September 19, 2025

      How To Minimize The Environmental Impact Of Your Website

      September 19, 2025

      Progress adds AI coding assistance to Telerik and Kendo UI libraries

      September 19, 2025

      Wasm 3.0 standard is now officially complete

      September 19, 2025

      Development Release: Ubuntu 25.10 Beta

      September 18, 2025

      Development Release: Linux Mint 7 Beta “LMDE”

      September 18, 2025

      Distribution Release: Tails 7.0

      September 18, 2025

      Distribution Release: Security Onion 2.4.180

      September 18, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      GenStudio for Performance Marketing: What’s New and What We’ve Learned

      September 19, 2025
      Recent

      GenStudio for Performance Marketing: What’s New and What We’ve Learned

      September 19, 2025

      Agentic and Generative Commerce Can Elevate CX in B2B

      September 19, 2025

      AI Momentum and Perficient’s Inclusion in Analyst Reports – Highlights From 2025 So Far

      September 18, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Denmark’s Strategic Leap Replacing Microsoft Office 365 with LibreOffice for Digital Independence

      September 19, 2025
      Recent

      Denmark’s Strategic Leap Replacing Microsoft Office 365 with LibreOffice for Digital Independence

      September 19, 2025

      Development Release: Ubuntu 25.10 Beta

      September 18, 2025

      Development Release: Linux Mint 7 Beta “LMDE”

      September 18, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2022-50225 – RISC-V Linux Kernel Uprobe SR SPIE Handling Vulnerability

    CVE-2022-50225 – RISC-V Linux Kernel Uprobe SR SPIE Handling Vulnerability

    June 18, 2025

    CVE ID : CVE-2022-50225

    Published : June 18, 2025, 11:15 a.m. | 3 hours, 16 minutes ago

    Description : In the Linux kernel, the following vulnerability has been resolved:

    riscv:uprobe fix SR_SPIE set/clear handling

    In riscv the process of uprobe going to clear spie before exec
    the origin insn,and set spie after that.But When access the page
    which origin insn has been placed a page fault may happen and
    irq was disabled in arch_uprobe_pre_xol function,It cause a WARN
    as follows.
    There is no need to clear/set spie in arch_uprobe_pre/post/abort_xol.
    We can just remove it.

    [ 31.684157] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1488
    [ 31.684677] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 76, name: work
    [ 31.684929] preempt_count: 0, expected: 0
    [ 31.685969] CPU: 2 PID: 76 Comm: work Tainted: G
    [ 31.686542] Hardware name: riscv-virtio,qemu (DT)
    [ 31.686797] Call Trace:
    [ 31.687053] [] dump_backtrace+0x30/0x38
    [ 31.687699] [] show_stack+0x40/0x4c
    [ 31.688141] [] dump_stack_lvl+0x44/0x5c
    [ 31.688396] [] dump_stack+0x18/0x20
    [ 31.688653] [] __might_resched+0x114/0x122
    [ 31.688948] [] __might_sleep+0x50/0x7a
    [ 31.689435] [] down_read+0x30/0x130
    [ 31.689728] [] do_page_fault+0x166/x446
    [ 31.689997] [] ret_from_exception+0x0/0xc

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2022-50222 – Linux Kernel TTY Unicode Screen Buffer Info Leak
    Next Article CVE-2022-50227 – “KVM Xen Timer Initialization Vulnerability”

    Related Posts

    Development

    Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

    September 14, 2025
    Development

    Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

    September 14, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-57814 – Apache Request-Filtering-Agent SSRF Bypass

    Common Vulnerabilities and Exposures (CVEs)

    Enterprise AI Without GPU Burn: Salesforce’s xGen-small Optimizes for Context, Cost, and Privacy

    Machine Learning

    CVE-2025-6156 – PHPGurukul Nipah Virus Testing Management System SQL Injection Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Microsoft yanks its Movies & TV store, ending a 19-year video experiment

    Operating Systems

    Highlights

    CVE-2025-54135 – Cursor Unapproved File Writing and RCE Vulnerability

    August 5, 2025

    CVE ID : CVE-2025-54135

    Published : Aug. 5, 2025, 1:15 a.m. | 22 hours, 26 minutes ago

    Description : Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new one doesn’t. Hence, if sensitive MCP files, such as the .cursor/mcp.json file don’t already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.

    Severity: 8.5 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems

    May 13, 2025

    CVE-2025-3769 – LatePoint WordPress Calendar Booking Plugin Insecure Direct Object Reference Vulnerability

    May 14, 2025

    Celebrating GAAD by Committing to Universal Design: Flexibility in Use

    May 21, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.