CVE-2022-50494None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash When CPU 0 is offline and intel_powerclamp is used to inject idle, it generates k…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
When CPU 0 is offline and intel_powerclamp is used to inject idle, it generates kernel BUG:
BUG: using smp_processor_id() in preemptible [00000000] code: bash/15687 caller is debug_smp_processor_id+0x17/0x20 CPU: 4 PID: 15687 Comm: bash Not tainted 5.19.0-rc7+ #57 Call Trace: <TASK> dump_stack_lvl+0x49/0x63 dump_stack+0x10/0x16 check_preemption_disabled+0xdd/0xe0 debug_smp_processor_id+0x17/0x20 powerclamp_set_cur_state+0x7f/0xf9 [intel_powerclamp] ... ...
Here CPU 0 is the control CPU by default and changed to the current CPU, if CPU 0 offlined. This check has to be performed under cpus_read_lock(), hence the above warning.
Use get_cpu() instead of smp_processor_id() to avoid this BUG.
[ rjw: Subject edits ]
Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 3e799e815097febbcb81b472285be824f5d089f9Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 0f91f66c568b316b19cb042cf50584467b3bdff4Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 6904727db0eb62fb0c2dce1cf331c341d97ee4b7Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 5a646c38f648185ee2c62f2a19da3c6f04e27612Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 513943bf879d45005213e6f5cfb7d9e9943f589fLinux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 5614908434451aafbf9b24cb5247cf1d21269f76Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 6e2a347b304224b2aeb1c0ea000d1cf8a02cc592Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 418fae0700e85a498062424f8656435c32cdb200Linux >= d6d71ee4a14ae602db343ec48c491851d7ec5267 < 68b99e94a4a2db6ba9b31fe0485e057b9354a640Linux 3.9Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses