CVE-2022-49034: 
Linux Debian vulnerability analysis and mitigation

In the Linux kernel, a vulnerability was identified and resolved in the CPU information handling code. The issue occurs when CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, causing cpumaxbits_warn() to generate runtime warnings when displaying /proc/cpuinfo (Kernel Git).

The vulnerability manifests when the kernel code uses NRCPUS instead of nrcpuids to iterate CPUs. This results in a warning from the cpumaxbitswarn() function when accessing /proc/cpuinfo. The issue specifically affects the SuperH (SH) architecture's CPU information handling code in arch/sh/kernel/cpu/proc.c (Kernel Git).

When triggered, the vulnerability causes kernel warnings to be generated, which could potentially flood system logs. The issue occurs during normal system operation when accessing CPU information through /proc/cpuinfo (Kernel Git).

The vulnerability has been fixed by modifying the code to use nrcpuids (the runtime limit) instead of NR_CPUS when iterating CPUs. This change was implemented in the kernel source code and has been merged into the mainline kernel (Kernel Git).