CVE-2022-50322: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50322 is a vulnerability discovered in the Linux kernel, specifically related to a function prototype mismatch in the msc313rtcprobe() function. The vulnerability was disclosed and published on September 15, 2025 (NVD).

The vulnerability stems from a function prototype mismatch in msc313rtcprobe() when used with Clang's kernel control flow integrity (kCFI, CONFIGCFICLANG). The issue occurs because msc313rtcprobe() was passing clkdisableunprepare() directly, which had mismatching prototypes for devmaddactionorreset()'s callback argument. This was identified through Clang's new -Wcast-function-type-strict flag, which provides more sensitive checking than the simpler -Wcast-function-type that only checks for type width mismatches (NVD).

When the vulnerability is triggered, it can result in either a kernel panic or thread termination at runtime due to the validation failure of indirect call targets against the expected function pointer prototype (NVD).

The vulnerability has been resolved by refactoring the code to use devmclkgetenabled() instead of the direct passing of clkdisable_unprepare(). This change ensures proper function prototype matching and prevents the runtime validation failures (NVD).