CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-16 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list Use list_for_each_entry_safe() to allow removing an entry during iteration.

Affected products

Linux kernel: from 4.11 before 4.14.267; from 4.15 before 4.19.230; from 4.20 before 5.4.180; from 5.5 before 5.10.101; from 5.11 before 5.15.24; from 5.16 before 5.16.10 — fixed in 4.14.267, 4.19.230, 5.10.101, 5.15.24, 5.16.10, 5.4.180

How to fix

Upgrade to a fixed version: Linux kernel 4.14.267, 4.19.230, 5.10.101, 5.15.24. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-48799 or the next vulnerability affects your stack