CVE-2022-50494

thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash

State: Published
Severity: Not scored
Published: Oct 4, 2025
Updated: May 11, 2026
Reserved: Oct 4, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash

When CPU 0 is offline and intel_powerclamp is used to inject idle, it generates kernel BUG:

BUG: using smp_processor_id() in preemptible [00000000] code: bash/15687 caller is debug_smp_processor_id+0x17/0x20 CPU: 4 PID: 15687 Comm: bash Not tainted 5.19.0-rc7+ #57 Call Trace: <TASK> dump_stack_lvl+0x49/0x63 dump_stack+0x10/0x16 check_preemption_disabled+0xdd/0xe0 debug_smp_processor_id+0x17/0x20 powerclamp_set_cur_state+0x7f/0xf9 [intel_powerclamp] ... ...

Here CPU 0 is the control CPU by default and changed to the current CPU, if CPU 0 offlined. This check has to be performed under cpus_read_lock(), hence the above warning.

Use get_cpu() instead of smp_processor_id() to avoid this BUG.

[ rjw: Subject edits ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 3e799e815097febbcb81b472285be824f5d089f9Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 0f91f66c568b316b19cb042cf50584467b3bdff4Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 6904727db0eb62fb0c2dce1cf331c341d97ee4b7Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 5a646c38f648185ee2c62f2a19da3c6f04e27612Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 513943bf879d45005213e6f5cfb7d9e9943f589fAffected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 5614908434451aafbf9b24cb5247cf1d21269f76Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 6e2a347b304224b2aeb1c0ea000d1cf8a02cc592Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 418fae0700e85a498062424f8656435c32cdb200Affected d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 68b99e94a4a2db6ba9b31fe0485e057b9354a640Affected
LinuxLinux	3.9Affected before 3.9Not affected 4.9.331 through 4.9.Not affected 4.14.296 through 4.14.Not affected 4.19.262 through 4.19.Not affected 5.4.220 through 5.4.Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 3e799e815097febbcb81b472285be824f5d089f9Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 0f91f66c568b316b19cb042cf50584467b3bdff4Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 6904727db0eb62fb0c2dce1cf331c341d97ee4b7Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 5a646c38f648185ee2c62f2a19da3c6f04e27612Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 513943bf879d45005213e6f5cfb7d9e9943f589fAffected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 5614908434451aafbf9b24cb5247cf1d21269f76Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 6e2a347b304224b2aeb1c0ea000d1cf8a02cc592Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 418fae0700e85a498062424f8656435c32cdb200Affected
d6d71ee4a14ae602db343ec48c491851d7ec5267 to before 68b99e94a4a2db6ba9b31fe0485e057b9354a640Affected

LinuxLinux

3.9Affected
before 3.9Not affected
4.9.331 through 4.9.*Not affected
4.14.296 through 4.14.*Not affected
4.19.262 through 4.19.*Not affected
5.4.220 through 5.4.*Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.