CVE-2022-25265

A vulnerability was found in the Linux kernel when certain binary files have the exec-all attribute with gcc. This issue can cause the execution of bytes located in the non-executable regions of a file.

This vulnerability only applies when running 32 bits executables in an x86_64 kernel. The developer would need to intentionally make its app vulnerable by:

1. Compiling it to 32 bits
2. Remove the PT_GNU_STACK ELF field by compiling with an old GCC, using some tricky linker flag, or editing the ELF binary.

64 bits executables are immune to this. RHEL 9 does not support 32 bit binaries so there would be no fixes for RHEL 9.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.