PT-2024-11891 · Linux+5 · Linux Kernel+5
Published
2024-11-30
·
Updated
2026-03-14
·
CVE-2022-49034
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.19-rc5+
Description
The issue is related to a warning generated by cpu max bits warn() when CONFIG CPUMASK OFFSTACK and CONFIG DEBUG PER CPU MAPS are selected, causing a runtime warning when showing /proc/cpuinfo. This is fixed by using nr cpu ids instead of NR CPUS to iterate CPUs.
Recommendations
For Linux kernel versions prior to 5.19-rc5+, update to a version that includes the fix for the warning generated by cpu max bits warn().
As a temporary workaround, consider disabling the
show cpuinfo() function until a patch is available.
Restrict access to the /proc/cpuinfo file to minimize the risk of exploitation.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu