CVE-2022-48799
published 2024-07-16CVE-2022-48799: In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix list corruption in perf_cgroup_switch()
There's list corruption on cgrp_cpuctx_list. This happens on the
following path:
perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list)
cpu_ctx_sched_in
ctx_sched_in
ctx_pinned_sched_in
merge_sched_in
perf_cgroup_event_disable: remove the event from the list
Use list_for_each_entry_safe() to allow removing an entry during
iteration.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.10-1 (bookworm) | linux 5.16.10-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < 5d76ed4223403f90421782adb2f20a9ecbc93186 | 5d76ed4223403f90421782adb2f20a9ecbc93186 |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < 30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727 | 30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727 |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < a2ed7b29d0673ba361546e2d87dbbed149456c45 | a2ed7b29d0673ba361546e2d87dbbed149456c45 |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < f6b5d51976fcefef5732da3e3feb3ccff680f7c8 | f6b5d51976fcefef5732da3e3feb3ccff680f7c8 |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < 7969fe91c9830e045901970e9d755b7505881d4a | 7969fe91c9830e045901970e9d755b7505881d4a |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < 2142bc1469a316fddd10012d76428f7265258f81 | 2142bc1469a316fddd10012d76428f7265258f81 |
| linux | linux | >= 058fe1c0440e68a1ba3c2270ae43e9f0298b27d8 < 5f4e5ce638e6a490b976ade4a40017b40abb2da0 | 5f4e5ce638e6a490b976ade4a40017b40abb2da0 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.103-1 | 5.10.103-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 4.11 < 4.14.267 | 4.14.267 |
| linux | linux_kernel | >= 4.15 < 4.19.230 | 4.19.230 |
| linux | linux_kernel | >= 4.20 < 5.4.180 | 5.4.180 |
| linux | linux_kernel | >= 5.11 < 5.15.24 | 5.15.24 |
| linux | linux_kernel | >= 5.16 < 5.16.10 | 5.16.10 |
| linux | linux_kernel | >= 5.5 < 5.10.101 | 5.10.101 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 5.16.9 perf perf_cgroup_switch iteration (Nessus ID 208672 / WID-SEC-2024-1625)
vuldb·2026-07-11·CVSS 5.5
CVE-2022-48799 [MEDIUM] Linux Kernel up to 5.16.9 perf perf_cgroup_switch iteration (Nessus ID 208672 / WID-SEC-2024-1625)
A vulnerability classified as critical has been found in Linux Kernel up to 5.16.9. This issue affects the function perf_cgroup_switch of the component perf. This manipulation causes excessive iteration.
This vulnerability is tracked as CVE-2022-48799. The attack is only possible within the local network. No exploit exists.
It is recommended to upgrade the affected component.
OSV
CVE-2022-48799: In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_
osv·2024-07-16·CVSS 5.5
CVE-2022-48799 [MEDIUM] CVE-2022-48799: In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_
In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list Use list_for_each_entry_safe() to allow removing an entry during iteration.
GHSA
GHSA-rw3h-fgc9-wwjm: In the Linux kernel, the following vulnerability has been resolved:
perf: Fix list corruption in perf_cgroup_switch()
There's list corruption on cgr
ghsa_unreviewed·2024-07-16
CVE-2022-48799 [MEDIUM] GHSA-rw3h-fgc9-wwjm: In the Linux kernel, the following vulnerability has been resolved:
perf: Fix list corruption in perf_cgroup_switch()
There's list corruption on cgr
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix list corruption in perf_cgroup_switch()
There's list corruption on cgrp_cpuctx_list. This happens on the
following path:
perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list)
cpu_ctx_sched_in
ctx_sched_in
ctx_pinned_sched_in
merge_sched_in
perf_cgroup_event_disable: remove the event from the list
Use list_for_each_entry_safe() to allow removing an entry during
iteration.
Red Hat
kernel: perf: Fix list corruption in perf_cgroup_switch()
vendor_redhat·2024-07-16·CVSS 5.5
CVE-2022-48799 [MEDIUM] CWE-99 kernel: perf: Fix list corruption in perf_cgroup_switch()
kernel: perf: Fix list corruption in perf_cgroup_switch()
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix list corruption in perf_cgroup_switch()
There's list corruption on cgrp_cpuctx_list. This happens on the
following path:
perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list)
cpu_ctx_sched_in
ctx_sched_in
ctx_pinned_sched_in
merge_sched_in
perf_cgroup_event_disable: remove the event from the list
Use list_for_each_entry_safe() to allow removing an entry during
iteration.
A vulnerability was found in the Linux kernel's performance monitoring subsystem, where the perf_cgroup_switch() function can lead to list corruption on the cgrp_cpuctx_list. This occurs during the iteration of the list when an entry is removed using perf_cgroup_event_disable, which
Debian
CVE-2022-48799: linux - In the Linux kernel, the following vulnerability has been resolved: perf: Fix l...
vendor_debian·2022·CVSS 5.5
CVE-2022-48799 [MEDIUM] CVE-2022-48799: linux - In the Linux kernel, the following vulnerability has been resolved: perf: Fix l...
In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list Use list_for_each_entry_safe() to allow removing an entry during iteration.
Scope: local
bookworm: resolved (fixed in 5.16.10-1)
bullseye: resolved (fixed in 5.10.103-1)
forky: resolved (fixed in 5.16.10-1)
sid: resolved (fixed in 5.16.10-1)
trixie: resolved (fixed in 5.16.10-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/2142bc1469a316fddd10012d76428f7265258f81https://git.kernel.org/stable/c/30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727https://git.kernel.org/stable/c/5d76ed4223403f90421782adb2f20a9ecbc93186https://git.kernel.org/stable/c/5f4e5ce638e6a490b976ade4a40017b40abb2da0https://git.kernel.org/stable/c/7969fe91c9830e045901970e9d755b7505881d4ahttps://git.kernel.org/stable/c/a2ed7b29d0673ba361546e2d87dbbed149456c45https://git.kernel.org/stable/c/f6b5d51976fcefef5732da3e3feb3ccff680f7c8https://git.kernel.org/stable/c/2142bc1469a316fddd10012d76428f7265258f81https://git.kernel.org/stable/c/30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727https://git.kernel.org/stable/c/5d76ed4223403f90421782adb2f20a9ecbc93186https://git.kernel.org/stable/c/5f4e5ce638e6a490b976ade4a40017b40abb2da0https://git.kernel.org/stable/c/7969fe91c9830e045901970e9d755b7505881d4ahttps://git.kernel.org/stable/c/a2ed7b29d0673ba361546e2d87dbbed149456c45https://git.kernel.org/stable/c/f6b5d51976fcefef5732da3e3feb3ccff680f7c8
2024-07-16
Published