Lucene search

K
osvGoogleOSV:CVE-2022-48799
HistoryJul 16, 2024 - 12:15 p.m.

CVE-2022-48799

2024-07-1612:15:04
Google
osv.dev
4
linux kernel
perf
vulnerability

AI Score

7

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix list corruption in perf_cgroup_switch()

There’s list corruption on cgrp_cpuctx_list. This happens on the
following path:

perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list)
cpu_ctx_sched_in
ctx_sched_in
ctx_pinned_sched_in
merge_sched_in
perf_cgroup_event_disable: remove the event from the list

Use list_for_each_entry_safe() to allow removing an entry during
iteration.