CVE-2022-48845
published 2024-07-16CVE-2022-48845: In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE (landed…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
13.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
MIPS: smp: fill in sibling and core maps earlier
After enabling CONFIG_SCHED_CORE (landed during 5.14 cycle),
2-core 2-thread-per-core interAptiv (CPS-driven) started emitting
the following:
[ 0.025698] CPU1 revision is: 0001a120 (MIPS interAptiv (multi))
[ 0.048183] ------------[ cut here ]------------
[ 0.048187] WARNING: CPU: 1 PID: 0 at kernel/sched/core.c:6025 sched_core_cpu_starting+0x198/0x240
[ 0.048220] Modules linked in:
[ 0.048233] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3+ #35 b7b319f24073fd9a3c2aa7ad15fb7993eec0b26f
[ 0.048247] Stack : 817f0000 00000004 327804c8 810eb050 00000000 00000004 00000000 c314fdd1
[ 0.048278] 830cbd64 819c0000 81800000 817f0000 83070bf4 00000001 830cbd08 00000000
[ 0.048307] 00000000 00000000 815fcbc4 00000000 00000000 00000000 00000000 00000000
[ 0.048334] 00000000 00000000 00000000 00000000 817f0000 00000000 00000000 817f6f34
[ 0.048361] 817f0000 818a3c00 817f0000 00000004 00000000 00000000 4dc33260 0018c933
[ 0.048389] ...
[ 0.048396] Call Trace:
[ 0.048399] [] show_stack+0x3c/0x140
[ 0.048424] [] dump_stack_lvl+0x60/0x80
[ 0.048440] [] __warn+0xc0/0xf4
[ 0.048454] [] warn_slowpath_fmt+0x64/0x10c
[ 0.048467] [] sched_core_cpu_starting+0x198/0x240
[ 0.048483] [] sched_cpu_starting+0x14/0x80
[ 0.048497] [] cpuhp_invoke_callback_range+0x78/0x140
[ 0.048510] [] notify_cpu_starting+0x94/0x140
[ 0.048523] [] start_secondary+0xbc/0x280
[ 0.048539]
[ 0.048543] ---[ end trace 0000000000000000 ]---
[ 0.048636] Synchronize counters for CPU 1: done.
...for each but CPU 0/boot.
Basic debug printks right before the mentioned line say:
[ 0.048170] CPU: 1, smt_mask:
So smt_mask, which is sibling mask obviously, is empty when entering
the function.
This is critical, as sched_core_cpu_starting() calculates
core-scheduling parameters only once per CPU start, and it's crucial
to have all the parameters filled in at that moment (at least it
uses cpu_smt_mask() w
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.18-1 (bookworm) | linux 5.16.18-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < 7315f8538db009605ffba00370678142ef00ac98 | 7315f8538db009605ffba00370678142ef00ac98 |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < 32813321f18d5432cec1b1a6ecc964f9ea26d565 | 32813321f18d5432cec1b1a6ecc964f9ea26d565 |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < 56eaacb8137ba2071ce48d4e3d91979270e139a7 | 56eaacb8137ba2071ce48d4e3d91979270e139a7 |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < c2420bc3333111184cdcb112282d13afe1338dd7 | c2420bc3333111184cdcb112282d13afe1338dd7 |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < e8ad9ecc406974deb5e7c070f51cc1d09d21dc4b | e8ad9ecc406974deb5e7c070f51cc1d09d21dc4b |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < be538b764a46be1d0700fd3b6e82fb76bd17f13a | be538b764a46be1d0700fd3b6e82fb76bd17f13a |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < 94647aec80d03d6914aa664b7b8e103cd9d63239 | 94647aec80d03d6914aa664b7b8e103cd9d63239 |
| linux | linux | >= e545a6140b698b2494daf0b32107bdcc5e901390 < f2703def339c793674010cc9f01bfe4980231808 | f2703def339c793674010cc9f01bfe4980231808 |
| linux | linux_kernel | < 4.9.308 | 4.9.308 |
| linux | linux_kernel | >= 0 < 5.10.113-1 | 5.10.113-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 4.10 < 4.14.273 | 4.14.273 |
| linux | linux_kernel | >= 4.15 < 4.19.236 | 4.19.236 |
| linux | linux_kernel | >= 4.20 < 5.4.186 | 5.4.186 |
| linux | linux_kernel | >= 5.11 < 5.15.30 | 5.15.30 |
| linux | linux_kernel | >= 5.16 < 5.16.16 | 5.16.16 |
| linux | linux_kernel | >= 5.5 < 5.10.107 | 5.10.107 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r7cx-6c4p-88r8: In the Linux kernel, the following vulnerability has been resolved:
MIPS: smp: fill in sibling and core maps earlier
After enabling CONFIG_SCHED_COR
ghsa_unreviewed·2024-07-16
CVE-2022-48845 [MEDIUM] GHSA-r7cx-6c4p-88r8: In the Linux kernel, the following vulnerability has been resolved:
MIPS: smp: fill in sibling and core maps earlier
After enabling CONFIG_SCHED_COR
In the Linux kernel, the following vulnerability has been resolved:
MIPS: smp: fill in sibling and core maps earlier
After enabling CONFIG_SCHED_CORE (landed during 5.14 cycle),
2-core 2-thread-per-core interAptiv (CPS-driven) started emitting
the following:
[ 0.025698] CPU1 revision is: 0001a120 (MIPS interAptiv (multi))
[ 0.048183] ------------[ cut here ]------------
[ 0.048187] WARNING: CPU: 1 PID: 0 at kernel/sched/core.c:6025 sched_core_cpu_starting+0x198/0x240
[ 0.048220] Modules linked in:
[ 0.048233] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3+ #35 b7b319f24073fd9a3c2aa7ad15fb7993eec0b26f
[ 0.048247] Stack : 817f0000 00000004 327804c8 810eb050 00000000 00000004 00000000 c314fdd1
[ 0.048278] 830cbd64 819c0000 81800000 817f0000 83070bf4 00000001 830cbd08 00000000
[ 0.048
OSV
CVE-2022-48845: In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE
osv·2024-07-16·CVSS 5.5
CVE-2022-48845 [MEDIUM] CVE-2022-48845: In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE
In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE (landed during 5.14 cycle), 2-core 2-thread-per-core interAptiv (CPS-driven) started emitting the following: [ 0.025698] CPU1 revision is: 0001a120 (MIPS interAptiv (multi)) [ 0.048183] ------------[ cut here ]------------ [ 0.048187] WARNING: CPU: 1 PID: 0 at kernel/sched/core.c:6025 sched_core_cpu_starting+0x198/0x240 [ 0.048220] Modules linked in: [ 0.048233] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3+ #35 b7b319f24073fd9a3c2aa7ad15fb7993eec0b26f [ 0.048247] Stack : 817f0000 00000004 327804c8 810eb050 00000000 00000004 00000000 c314fdd1 [ 0.048278] 830cbd64 819c0000 81800000 817f0000 83070bf4 00000001 830cbd08 00000000 [ 0.048307
Red Hat
kernel: MIPS: smp: fill in sibling and core maps earlier
vendor_redhat·2024-07-16·CVSS 5.5
CVE-2022-48845 [MEDIUM] kernel: MIPS: smp: fill in sibling and core maps earlier
kernel: MIPS: smp: fill in sibling and core maps earlier
In the Linux kernel, the following vulnerability has been resolved:
MIPS: smp: fill in sibling and core maps earlier
After enabling CONFIG_SCHED_CORE (landed during 5.14 cycle),
2-core 2-thread-per-core interAptiv (CPS-driven) started emitting
the following:
[ 0.025698] CPU1 revision is: 0001a120 (MIPS interAptiv (multi))
[ 0.048183] ------------[ cut here ]------------
[ 0.048187] WARNING: CPU: 1 PID: 0 at kernel/sched/core.c:6025 sched_core_cpu_starting+0x198/0x240
[ 0.048220] Modules linked in:
[ 0.048233] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3+ #35 b7b319f24073fd9a3c2aa7ad15fb7993eec0b26f
[ 0.048247] Stack : 817f0000 00000004 327804c8 810eb050 00000000 00000004 00000000 c314fdd1
[ 0.048278] 830cbd64 819c0000 818000
Debian
CVE-2022-48845: linux - In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: ...
vendor_debian·2022·CVSS 5.5
CVE-2022-48845 [MEDIUM] CVE-2022-48845: linux - In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: ...
In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIG_SCHED_CORE (landed during 5.14 cycle), 2-core 2-thread-per-core interAptiv (CPS-driven) started emitting the following: [ 0.025698] CPU1 revision is: 0001a120 (MIPS interAptiv (multi)) [ 0.048183] ------------[ cut here ]------------ [ 0.048187] WARNING: CPU: 1 PID: 0 at kernel/sched/core.c:6025 sched_core_cpu_starting+0x198/0x240 [ 0.048220] Modules linked in: [ 0.048233] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.17.0-rc3+ #35 b7b319f24073fd9a3c2aa7ad15fb7993eec0b26f [ 0.048247] Stack : 817f0000 00000004 327804c8 810eb050 00000000 00000004 00000000 c314fdd1 [ 0.048278] 830cbd64 819c0000 81800000 817f0000 83070bf4 00000001 830cbd08 00000000 [ 0.048307
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/32813321f18d5432cec1b1a6ecc964f9ea26d565https://git.kernel.org/stable/c/56eaacb8137ba2071ce48d4e3d91979270e139a7https://git.kernel.org/stable/c/7315f8538db009605ffba00370678142ef00ac98https://git.kernel.org/stable/c/94647aec80d03d6914aa664b7b8e103cd9d63239https://git.kernel.org/stable/c/be538b764a46be1d0700fd3b6e82fb76bd17f13ahttps://git.kernel.org/stable/c/c2420bc3333111184cdcb112282d13afe1338dd7https://git.kernel.org/stable/c/e8ad9ecc406974deb5e7c070f51cc1d09d21dc4bhttps://git.kernel.org/stable/c/f2703def339c793674010cc9f01bfe4980231808https://git.kernel.org/stable/c/32813321f18d5432cec1b1a6ecc964f9ea26d565https://git.kernel.org/stable/c/56eaacb8137ba2071ce48d4e3d91979270e139a7https://git.kernel.org/stable/c/7315f8538db009605ffba00370678142ef00ac98https://git.kernel.org/stable/c/94647aec80d03d6914aa664b7b8e103cd9d63239https://git.kernel.org/stable/c/be538b764a46be1d0700fd3b6e82fb76bd17f13ahttps://git.kernel.org/stable/c/c2420bc3333111184cdcb112282d13afe1338dd7https://git.kernel.org/stable/c/e8ad9ecc406974deb5e7c070f51cc1d09d21dc4bhttps://git.kernel.org/stable/c/f2703def339c793674010cc9f01bfe4980231808
2024-07-16
Published