Linux · Linux Kernel · CVE-2022-48799
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The issue is related to list corruption in the `perf cgroup switch()` function, specifically on the `cgrp cpuctx list`. This corruption occurs when removing an event from the list during iteration. The vulnerability can be exploited to cause a denial of service. The path where this happens includes `perf cgroup switch()`, `list for each entry(cgrp cpuctx list)`, `cpu ctx sched in`, `ctx sched in`, `ctx pinned sched in`, `merge sched in`, and `perf cgroup event disable`. To fix this, `list for each entry safe()` should be used to allow removing an entry during iteration.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.