PT-2025-40728 · Linux+2 · Linux Kernel+2

CVE-2022-50494

·

Published

2022-09-20

·

Updated

2025-12-23

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc7+
Description The Linux kernel contains an issue where using smp processor id() can lead to a kernel crash when CPU 0 is offline and intel powerclamp is used to inject idle. This occurs because the function is called in preemptible code, resulting in a BUG. The issue is triggered when CPU 0 is the control CPU and is subsequently taken offline. The fix involves using get cpu() instead of smp processor id() to avoid the crash.
Recommendations Update to a version later than 5.19.0-rc7+ to resolve this issue.

Exploit

Fix

Special Elements Injection

Improper Neutralization

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
BDU:2026-09042
CVE-2022-50494
OESA-2025-2553
RHSA-2023:6583
RHSA-2023_6583
SUSE-SU-2025:4111-1
SUSE-SU-2025:4135-1
SUSE-SU-2025:4139-1
SUSE-SU-2025:4149-1
SUSE-SU-2025:4188-1
SUSE-SU-2025:4320-1
SUSE-SU-2025:4515-1

Affected Products

Linux Kernel
Red Hat
Suse