-

CVE-2022-50494

In the Linux kernel, the following vulnerability has been resolved:

thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash

When CPU 0 is offline and intel_powerclamp is used to inject
idle, it generates kernel BUG:

BUG: using smp_processor_id() in preemptible [00000000] code: bash/15687
caller is debug_smp_processor_id+0x17/0x20
CPU: 4 PID: 15687 Comm: bash Not tainted 5.19.0-rc7+ #57
Call Trace:
<TASK>
dump_stack_lvl+0x49/0x63
dump_stack+0x10/0x16
check_preemption_disabled+0xdd/0xe0
debug_smp_processor_id+0x17/0x20
powerclamp_set_cur_state+0x7f/0xf9 [intel_powerclamp]
...
...

Here CPU 0 is the control CPU by default and changed to the current CPU,
if CPU 0 offlined. This check has to be performed under cpus_read_lock(),
hence the above warning.

Use get_cpu() instead of smp_processor_id() to avoid this BUG.

[ rjw: Subject edits ]

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 3e799e815097febbcb81b472285be824f5d089f9
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 0f91f66c568b316b19cb042cf50584467b3bdff4
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 6904727db0eb62fb0c2dce1cf331c341d97ee4b7
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 5a646c38f648185ee2c62f2a19da3c6f04e27612
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 513943bf879d45005213e6f5cfb7d9e9943f589f
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 5614908434451aafbf9b24cb5247cf1d21269f76
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 6e2a347b304224b2aeb1c0ea000d1cf8a02cc592
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 418fae0700e85a498062424f8656435c32cdb200
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 68b99e94a4a2db6ba9b31fe0485e057b9354a640
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version <= 4.9.*
Version 4.9.331
Status unaffected
Version <= 4.14.*
Version 4.14.296
Status unaffected
Version <= 4.19.*
Version 4.19.262
Status unaffected
Version <= 5.4.*
Version 5.4.220
Status unaffected
Version <= 5.10.*
Version 5.10.150
Status unaffected
Version <= 5.15.*
Version 5.15.75
Status unaffected
Version <= 5.19.*
Version 5.19.17
Status unaffected
Version <= 6.0.*
Version 6.0.3
Status unaffected
Version <= *
Version 6.1
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.084
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String