NetSight
medium5.5

CVE-2022-48799

In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_li…

Impact

In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list Use list_for_each_entry_safe() to allow removing an entry during iteration.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.11 before 4.14.267
from 4.15 before 4.19.230
from 4.20 before 5.4.180
from 5.5 before 5.10.101
from 5.11 before 5.15.24
from 5.16 before 5.16.10

References