CVE-2022-48799 - perf: Fix list corruption in perf_cgroup_switch()

Back Back to CVE browser

MEDIUM

perf: Fix list corruption in perf_cgroup_switch()

Published Jul 16, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

There's list corruption on cgrp_cpuctx_list. This happens on the following path:

perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list

Use list_for_each_entry_safe() to allow removing an entry during iteration.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.11
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.11
- Version
  4.14.267
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.230
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.101
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.24
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.16.10
  Status
  unaffected
  Constraints
  <=5.16.*
- Version
  5.17
  Status
  unaffected
  Constraints
  <=*
- Version
  5.4.180
  Status
  unaffected
  Constraints
  <=5.4.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.11	affected	-
0	unaffected	<4.11
4.14.267	unaffected	<=4.14.*
4.19.230	unaffected	<=4.19.*
5.10.101	unaffected	<=5.10.*
5.15.24	unaffected	<=5.15.*
5.16.10	unaffected	<=5.16.*
5.17	unaffected	<=*
5.4.180	unaffected	<=5.4.*

Red Hat Enterprise Linux 8.2 Advanced Update Support

kernel-0:4.18.0-193.141.1.el8_2

Fixed · RHSA-2024:6992
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

kernel-0:4.18.0-305.139.1.el8_4

Fixed · RHSA-2024:6156
Red Hat Enterprise Linux 8.4 Telecommunications Update Service

kernel-0:4.18.0-305.139.1.el8_4

Fixed · RHSA-2024:6156
Red Hat Enterprise Linux 8.4 Telecommunications Update Service

kernel-rt-0:4.18.0-305.139.1.rt7.215.el8_4

Fixed · RHSA-2024:6160
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

kernel-0:4.18.0-305.139.1.el8_4

Fixed · RHSA-2024:6156
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

kernel-0:4.18.0-372.119.1.el8_6

Fixed · RHSA-2024:5692
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

kernel-0:4.18.0-372.119.1.el8_6

Fixed · RHSA-2024:5692
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

kernel-0:4.18.0-372.119.1.el8_6

Fixed · RHSA-2024:5692
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

kernel-0:5.14.0-70.117.1.el9_0

Fixed · RHSA-2024:6991
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

kernel-rt-0:5.14.0-70.117.1.rt21.189.el9_0

Fixed · RHSA-2024:6990
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel

Fix deferred
Red Hat Enterprise Linux 8

kernel-rt

Fix deferred
Red Hat Enterprise Linux 9

kernel

Fix deferred
Red Hat Enterprise Linux 9

kernel-rt

Fix deferred

Product	Package	State	Advisory
Red Hat Enterprise Linux 8.2 Advanced Update Support	kernel-0:4.18.0-193.141.1.el8_2	Fixed	RHSA-2024:6992
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	kernel-0:4.18.0-305.139.1.el8_4	Fixed	RHSA-2024:6156
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	kernel-0:4.18.0-305.139.1.el8_4	Fixed	RHSA-2024:6156
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	kernel-rt-0:4.18.0-305.139.1.rt7.215.el8_4	Fixed	RHSA-2024:6160
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	kernel-0:4.18.0-305.139.1.el8_4	Fixed	RHSA-2024:6156
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	kernel-0:4.18.0-372.119.1.el8_6	Fixed	RHSA-2024:5692
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	kernel-0:4.18.0-372.119.1.el8_6	Fixed	RHSA-2024:5692
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	kernel-0:4.18.0-372.119.1.el8_6	Fixed	RHSA-2024:5692
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	kernel-0:5.14.0-70.117.1.el9_0	Fixed	RHSA-2024:6991
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	kernel-rt-0:5.14.0-70.117.1.rt21.189.el9_0	Fixed	RHSA-2024:6990
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 8	kernel-rt	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel	Fix deferred	n/a
Red Hat Enterprise Linux 9	kernel-rt	Fix deferred	n/a

Remediation

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Metrics

0.24% 0.00242

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.00242

Score over time

2024-2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	0.24% (0.00242)	13.93th	v5 (v2026.06.15)
Jun 15, 2026	0.24% (0.00240)	14.81th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00081)	21.34th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	12.15th	v3 (v2023.03.01)
Jul 17, 2024	0.04% (0.00044)	10.62th	v3 (v2023.03.01)

Weaknesses (1)

CWE-99

References (12)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48799		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2298135		Issue Tracking
https://git.kernel.org/stable/c/2142bc1469a316fddd10012d76428f7265258f81		Patch
https://git.kernel.org/stable/c/30d9f3cbe47e1018ddc8069ac5b5c9e66fbdf727		Patch
https://git.kernel.org/stable/c/5d76ed4223403f90421782adb2f20a9ecbc93186		Patch
https://git.kernel.org/stable/c/5f4e5ce638e6a490b976ade4a40017b40abb2da0		Patch
https://git.kernel.org/stable/c/7969fe91c9830e045901970e9d755b7505881d4a		Patch
https://git.kernel.org/stable/c/a2ed7b29d0673ba361546e2d87dbbed149456c45		Patch
https://git.kernel.org/stable/c/f6b5d51976fcefef5732da3e3feb3ccff680f7c8		Patch
https://lore.kernel.org/linux-cve-announce/2024071643-CVE-2022-48799-9594@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48799
https://www.cve.org/CVERecord?id=CVE-2022-48799