
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-50118 affects the Linux kernel's powerpc/perf subsystem, specifically involving the optimization of clearing pending PMI and removal of WARNON for PMI check in powerpmu_disable function. The vulnerability was discovered and published on June 18, 2025 (NVD, Wiz).
The vulnerability stems from a function 'pmiirqpending' in hwirq.h that checks for PMI marked as pending in Paca (PACAIRQPMI). This function is used in powerpmudisable with a WARNON condition. The issue occurs when there is no PMC overflown among active PMU events, but a PMU pending exists in Paca. The function 'anypmcoverflown' checks PMCs on active events in cpuhw->n_events, but the PMC overflow could be from an inactive event (NVD).
When exploited, this vulnerability can lead to system warnings and potential system instability during performance monitoring operations. The issue particularly affects scenarios where PMC overflow occurs from inactive events while active PMC monitoring is in progress (Wiz).
The patch addresses two main issues: 1) Removal of the warning (WARNON(pmiirqpending())) since PMC overflow from inactive events is a valid scenario, and 2) Optimization in clearing pending PMI to reduce additional SPR reads via mfspr and decrease context switch overhead. The fix aligns with existing behavior in perfevent_interrupt where PMI overflows from inactive PMCs are already ignored (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."