CVE-2022-50224: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50224 is a vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) x86/mmu handling, specifically related to treating NX as a valid SPTE bit for NPT (Nested Page Tables). The vulnerability was published on June 18, 2025, affecting Linux kernel's virtualization functionality (NVD, Wiz).

The vulnerability occurs when KVM sets the NX bit during NX huge page mitigation enablement, which triggers a WARN condition on reserved SPTE bits. While KVM has required NX support for SVM since an earlier commit (b26a71a1a5b9 - 'KVM: SVM: Refuse to load kvm_amd if NX support is not available'), the interaction between NPT and the mitigation had not been properly tested (Wiz).

The vulnerability affects Linux kernel's KVM virtualization functionality, specifically impacting systems using AMD processors with NPT (Nested Page Tables) and NX huge page mitigation enabled. When triggered, it causes a kernel warning and potential system instability (Wiz).

The vulnerability has been resolved in various Linux distributions. Debian has fixed this in version 6.1.137-1 for bookworm and 6.12.31-1 for trixie. Updated packages are available through the respective distribution's security channels (Debian Tracker).