Kernel Crash Vulnerability in Linux Package: CVE-2022-49781
Summary
CVE-2022-49781: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling amd_pmu_enable_all() does: if (!test_bit(idx, cpuc->active_mask)... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is known for its stability and performance. However, vulnerabilities can arise, impacting system security and reliability. CVE-2022-49781 specifically affects the Linux kernel versions prior to 6.0.10-1, where a race condition can lead to a kernel crash.
Vulnerability Detail
CVE-2022-49781 is a vulnerability in the Linux kernel that arises from a race condition between the amd_pmu_enable_all function and the performance monitoring interrupt (NMI) handling. When a perf NMI occurs during the enabling of a performance monitoring event, it can lead to a situation where the event is unintentionally enabled and subsequently throttled. This results in a NULL pointer dereference in the kernel, causing a crash. The specific error message indicates a supervisor read access violation, which can severely disrupt system operations.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the BRS (Branch Record Sampling) feature at the beginning of the NMI handling and enable it back upon returning from the NMI. This approach prevents the enabling of events whose active masks are set but not yet enabled in the hardware performance monitoring unit.
Conclusion
CVE-2022-49781 represents a significant vulnerability in the Linux kernel that can lead to system crashes due to race conditions in performance monitoring. Users are advised to update their systems to the latest patched version to mitigate this risk. Temporary workarounds are available, but the best course of action is to apply the official fix.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49781 is a vulnerability in the Linux kernel that can cause a kernel crash due to a race condition during performance monitoring event handling.
The vulnerability affects Linux kernel versions prior to 6.0.10-1.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software. You can check your application against this vulnerability using the Vulert playground without any signup.
Exploiting this vulnerability can lead to a kernel crash, resulting in system instability and potential data loss.
Yes, the permanent fix is to update the Linux package to version 6.0.10-1 or later.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.