CVE-2022-48799

perf: Fix list corruption in perf_cgroup_switch()

State: Published
Severity: Not scored
Published: Jul 16, 2024
Updated: May 11, 2026
Reserved: Jul 16, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix list corruption in perf_cgroup_switch()

There's list corruption on cgrp_cpuctx_list. This happens on the following path:

perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list

Use list_for_each_entry_safe() to allow removing an entry during iteration.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 5d76ed4223403f90421782adb2f20a9ecbc93186Affected 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727Affected 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before a2ed7b29d0673ba361546e2d87dbbed149456c45Affected 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before f6b5d51976fcefef5732da3e3feb3ccff680f7c8Affected 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 7969fe91c9830e045901970e9d755b7505881d4aAffected 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 2142bc1469a316fddd10012d76428f7265258f81Affected 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 5f4e5ce638e6a490b976ade4a40017b40abb2da0Affected
LinuxLinux	4.11Affected before 4.11Not affected 4.14.267 through 4.14.Not affected 4.19.230 through 4.19.Not affected 5.4.180 through 5.4.Not affected 5.10.101 through 5.10.Not affected 5.15.24 through 5.15.Not affected 5.16.10 through 5.16.Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 5d76ed4223403f90421782adb2f20a9ecbc93186Affected
058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727Affected
058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before a2ed7b29d0673ba361546e2d87dbbed149456c45Affected
058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before f6b5d51976fcefef5732da3e3feb3ccff680f7c8Affected
058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 7969fe91c9830e045901970e9d755b7505881d4aAffected
058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 2142bc1469a316fddd10012d76428f7265258f81Affected
058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 to before 5f4e5ce638e6a490b976ade4a40017b40abb2da0Affected

LinuxLinux

4.11Affected
before 4.11Not affected
4.14.267 through 4.14.*Not affected
4.19.230 through 4.19.*Not affected
5.4.180 through 5.4.*Not affected
5.10.101 through 5.10.*Not affected
5.15.24 through 5.15.*Not affected
5.16.10 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.