PT-2025-18498 · Linux+2 · Linux Kernel+2
Published
2022-11-16
·
Updated
2025-06-30
·
CVE-2022-49781
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been resolved, related to a race condition between
amd pmu enable all, perf NMI, and throttling. The issue occurs when a perf NMI handler internally disables and enables all events, including one that amd pmu enable all was in the process of enabling. If the unintentionally enabled event has a very low sampling period, it can cause immediate successive NMI, leading to the event being throttled and resulting in a kernel crash. The crash is due to a NULL pointer dereference in amd pmu enable event when amd pmu enable all resumes after handling the NMIs.Recommendations
To resolve the issue, disable BRS at the beginning and enable it back while returning from NMI. This will prevent enabling events whose active masks are set but are not yet enabled in the hardware PMU.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse