{"id":"CVE-2022-50494","title":"thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash\n\nWhen CPU 0 is offline and intel_powerclamp is used to inject\nidle, it generates k…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 3e799e815097febbcb81b472285be824f5d089f9","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 0f91f66c568b316b19cb042cf50584467b3bdff4","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 6904727db0eb62fb0c2dce1cf331c341d97ee4b7","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 5a646c38f648185ee2c62f2a19da3c6f04e27612","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 513943bf879d45005213e6f5cfb7d9e9943f589f","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 5614908434451aafbf9b24cb5247cf1d21269f76","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 6e2a347b304224b2aeb1c0ea000d1cf8a02cc592","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 418fae0700e85a498062424f8656435c32cdb200","Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 68b99e94a4a2db6ba9b31fe0485e057b9354a640","Linux 3.9"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:12:17.132374Z"},"published":"2025-10-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:20:49.066Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-50494","references":[{"url":"https://git.kernel.org/stable/c/3e799e815097febbcb81b472285be824f5d089f9"},{"url":"https://git.kernel.org/stable/c/0f91f66c568b316b19cb042cf50584467b3bdff4"},{"url":"https://git.kernel.org/stable/c/6904727db0eb62fb0c2dce1cf331c341d97ee4b7"},{"url":"https://git.kernel.org/stable/c/5a646c38f648185ee2c62f2a19da3c6f04e27612"},{"url":"https://git.kernel.org/stable/c/513943bf879d45005213e6f5cfb7d9e9943f589f"},{"url":"https://git.kernel.org/stable/c/5614908434451aafbf9b24cb5247cf1d21269f76"},{"url":"https://git.kernel.org/stable/c/6e2a347b304224b2aeb1c0ea000d1cf8a02cc592"},{"url":"https://git.kernel.org/stable/c/418fae0700e85a498062424f8656435c32cdb200"},{"url":"https://git.kernel.org/stable/c/68b99e94a4a2db6ba9b31fe0485e057b9354a640"}],"tags":["cve.org"],"epss":0.00163,"epssPercentile":0.05562,"ingestedAt":"2026-11-05T22:38:31.742Z","slug":"CVE-2022-50494","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nthermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash\n\nWhen CPU 0 is offline and intel_powerclamp is used to inject\nidle, it generates kernel BUG:\n\nBUG: using smp_processor_id() in preemptible [00000000] code: bash/15687\ncaller is debug_smp_processor_id+0x17/0x20\nCPU: 4 PID: 15687 Comm: bash Not tainted 5.19.0-rc7+ #57\nCall Trace:\n<TASK>\ndump_stack_lvl+0x49/0x63\ndump_stack+0x10/0x16\ncheck_preemption_disabled+0xdd/0xe0\ndebug_smp_processor_id+0x17/0x20\npowerclamp_set_cur_state+0x7f/0xf9 [intel_powerclamp]\n...\n...\n\nHere CPU 0 is the control CPU by default and changed to the current CPU,\nif CPU 0 offlined. This check has to be performed under cpus_read_lock(),\nhence the above warning.\n\nUse get_cpu() instead of smp_processor_id() to avoid this BUG.\n\n[ rjw: Subject edits ]\n\n## Affected\n\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 3e799e815097febbcb81b472285be824f5d089f9`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 0f91f66c568b316b19cb042cf50584467b3bdff4`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 6904727db0eb62fb0c2dce1cf331c341d97ee4b7`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 5a646c38f648185ee2c62f2a19da3c6f04e27612`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 513943bf879d45005213e6f5cfb7d9e9943f589f`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 5614908434451aafbf9b24cb5247cf1d21269f76`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 6e2a347b304224b2aeb1c0ea000d1cf8a02cc592`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 418fae0700e85a498062424f8656435c32cdb200`\n- `Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 68b99e94a4a2db6ba9b31fe0485e057b9354a640`\n- `Linux 3.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}