cbcvebase.
CVE-2022-48845
published 2024-07-16

CVE-2022-48845: In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE (landed…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
13.0th percentile
In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE (landed during 5.14 cycle), 2-core 2-thread-per-core interAptiv (CPS-driven) started emitting the following: [ 0.025698] CPU1 revision is: 0001a120 (MIPS interAptiv (multi)) [ 0.048183] ------------[ cut here ]------------ [ 0.048187] WARNING: CPU: 1 PID: 0 at kernel/sched/core.c:6025 sched_core_cpu_starting+0x198/0x240 [ 0.048220] Modules linked in: [ 0.048233] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3+ #35 b7b319f24073fd9a3c2aa7ad15fb7993eec0b26f [ 0.048247] Stack : 817f0000 00000004 327804c8 810eb050 00000000 00000004 00000000 c314fdd1 [ 0.048278] 830cbd64 819c0000 81800000 817f0000 83070bf4 00000001 830cbd08 00000000 [ 0.048307] 00000000 00000000 815fcbc4 00000000 00000000 00000000 00000000 00000000 [ 0.048334] 00000000 00000000 00000000 00000000 817f0000 00000000 00000000 817f6f34 [ 0.048361] 817f0000 818a3c00 817f0000 00000004 00000000 00000000 4dc33260 0018c933 [ 0.048389] ... [ 0.048396] Call Trace: [ 0.048399] [] show_stack+0x3c/0x140 [ 0.048424] [] dump_stack_lvl+0x60/0x80 [ 0.048440] [] __warn+0xc0/0xf4 [ 0.048454] [] warn_slowpath_fmt+0x64/0x10c [ 0.048467] [] sched_core_cpu_starting+0x198/0x240 [ 0.048483] [] sched_cpu_starting+0x14/0x80 [ 0.048497] [] cpuhp_invoke_callback_range+0x78/0x140 [ 0.048510] [] notify_cpu_starting+0x94/0x140 [ 0.048523] [] start_secondary+0xbc/0x280 [ 0.048539] [ 0.048543] ---[ end trace 0000000000000000 ]--- [ 0.048636] Synchronize counters for CPU 1: done. ...for each but CPU 0/boot. Basic debug printks right before the mentioned line say: [ 0.048170] CPU: 1, smt_mask: So smt_mask, which is sibling mask obviously, is empty when entering the function. This is critical, as sched_core_cpu_starting() calculates core-scheduling parameters only once per CPU start, and it's crucial to have all the parameters filled in at that moment (at least it uses cpu_smt_mask() w

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.16.18-1 (bookworm)linux 5.16.18-1 (bookworm)
linuxlinux
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < 7315f8538db009605ffba00370678142ef00ac987315f8538db009605ffba00370678142ef00ac98
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < 32813321f18d5432cec1b1a6ecc964f9ea26d56532813321f18d5432cec1b1a6ecc964f9ea26d565
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < 56eaacb8137ba2071ce48d4e3d91979270e139a756eaacb8137ba2071ce48d4e3d91979270e139a7
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < c2420bc3333111184cdcb112282d13afe1338dd7c2420bc3333111184cdcb112282d13afe1338dd7
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < e8ad9ecc406974deb5e7c070f51cc1d09d21dc4be8ad9ecc406974deb5e7c070f51cc1d09d21dc4b
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < be538b764a46be1d0700fd3b6e82fb76bd17f13abe538b764a46be1d0700fd3b6e82fb76bd17f13a
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < 94647aec80d03d6914aa664b7b8e103cd9d6323994647aec80d03d6914aa664b7b8e103cd9d63239
linuxlinux>= e545a6140b698b2494daf0b32107bdcc5e901390 < f2703def339c793674010cc9f01bfe4980231808f2703def339c793674010cc9f01bfe4980231808
linuxlinux_kernel< 4.9.3084.9.308
linuxlinux_kernel>= 0 < 5.10.113-15.10.113-1
linuxlinux_kernel>= 0 < 5.16.18-15.16.18-1
linuxlinux_kernel>= 0 < 5.16.18-15.16.18-1
linuxlinux_kernel>= 0 < 5.16.18-15.16.18-1
linuxlinux_kernel>= 4.10 < 4.14.2734.14.273
linuxlinux_kernel>= 4.15 < 4.19.2364.19.236
linuxlinux_kernel>= 4.20 < 5.4.1865.4.186
linuxlinux_kernel>= 5.11 < 5.15.305.15.30
linuxlinux_kernel>= 5.16 < 5.16.165.16.16
linuxlinux_kernel>= 5.5 < 5.10.1075.10.107

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.