Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2022-2503

CVE-2022-2503MEDIUM

Linux Kernel LoadPin bypass via dm-verity table reload

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   H   N  U  H  H  H    6.7   .0042   34.9     —

AFFECTED
  Product       Versions       Fixed
  Linux Kernel  unspecified –  —

TIMELINE
  Jul 21  Reserved by Google
  Aug 12  Published (CNA: Google)
  Oct 14  EXPLOIT PUBLISHED — CVE-2022-2503 (Linux Kernel). Public exploit reference added.
  Oct 14  RESCORED — CVE-2022-2503 (Linux Kernel). CVSS 6.9 → 6.7 (NVD).

CWE-287, CWE-302 · CNA: Google · CVSS v3.1 · 3 references · NVD status: Modified

Description

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
July 21, 2022	Reserved	Reserved by Google
August 12, 2022	Published	Published (CNA: Google)
October 14, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2022-2503 (Linux Kernel). Public exploit reference added.
October 14, 2026	RESCORED	RESCORED — CVE-2022-2503 (Linux Kernel). CVSS 6.9 → 6.7 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux Kernel	Linux Kernel	—	unspecified	—

Weaknesses

CWE-287 · CWE-302

References (3)

https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://github.com/google/security-research/security/advisories/GHSA-6vq3-w69p-w63m [Exploit, Patch, Third Party Advisory]
https://security.netapp.com/advisory/ntap-20230214-0005/

Authoritative record: CVE-2022-2503 at cve.org

Vendors: linux

Weaknesses: CWE-287 · CWE-302

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-2503 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.