PT-2025-40725 · Linux+1 · Linux Kernel+1

Published 2025-05-13 · Updated 2025-10-04 · CVE-2022-50491

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-00053-g042116d99298

Description The Linux kernel coresight component contains an issue where cti enable hw() and cti disable hw() functions, called within an atomic context, incorrectly utilize runtime power management. This can lead to a system hang when running Perf Coresight tests or executing commands like perf record -e cs etm//u -- ls. The issue stems from calls to pm runtime put() with incorrect device parameters, which was previously addressed in commit 692c9a499b28 but resurfaced after commit 3c6656337852. The root cause is the use of runtime PM in a context where communication with firmware is occurring, potentially causing a sleep state within the atomic context.

Recommendations Update to version 6.0.0-00053-g042116d99298 or a later version to resolve this issue.

Exploit

Fix

Related Identifiers

CVE-2022-50491

RHSA-2025:6966

RHSA-2025_6966

Affected Products

Linux Kernel

Red Hat

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50491.json · Exploit
• https://ubuntu.com/security/CVE-2022-50491 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50491 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50491 · Security Note
• https://git.kernel.org/stable/c/4c365a0c21aaf2b8fcc88de8dc298803288f61ac · Patch
• https://git.kernel.org/stable/c/6746eae4bbaddcc16b40efb33dab79210828b3ce · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50491 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50491 · Vendor Advisory
• https://git.kernel.org/stable/c/c51cfba50df8b9e16bfe0e6d4f2f252a4a10063d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50491 · Security Note
• https://git.kernel.org/stable/c/e33ce54cef5d429430e3b1ae5c8ee4f4103c4fdc · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50491 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/6746eae4bbaddcc16b40efb33dab79210828b3ce · Note
• https://twitter.com/CVEnew/status/1974513833604755533 · Twitter Post