CVE-2022-50118
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-50118 affects the Linux kernel's powerpc/perf subsystem, specifically involving the optimization of clearing pending PMI and removal of WARNON for PMI check in powerpmu_disable function. The vulnerability was discovered and published on June 18, 2025 (NVD, Wiz).

Technical details

The vulnerability stems from a function 'pmiirqpending' in hwirq.h that checks for PMI marked as pending in Paca (PACAIRQPMI). This function is used in powerpmudisable with a WARNON condition. The issue occurs when there is no PMC overflown among active PMU events, but a PMU pending exists in Paca. The function 'anypmcoverflown' checks PMCs on active events in cpuhw->n_events, but the PMC overflow could be from an inactive event (NVD).

Impact

When exploited, this vulnerability can lead to system warnings and potential system instability during performance monitoring operations. The issue particularly affects scenarios where PMC overflow occurs from inactive events while active PMC monitoring is in progress (Wiz).

Mitigation and workarounds

The patch addresses two main issues: 1) Removal of the warning (WARNON(pmiirqpending())) since PMC overflow from inactive events is a valid scenario, and 2) Optimization in clearing pending PMI to reduce additional SPR reads via mfspr and decrease context switch overhead. The fix aligns with existing behavior in perfevent_interrupt where PMI overflows from inactive PMCs are already ignored (NVD).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40343MEDIUM6.4
  • Linux KernelLinux Kernel
  • kernel-rt-modules-internal
NoYesDec 09, 2025
CVE-2025-40342MEDIUM6.4
  • Linux KernelLinux Kernel
  • kernel-debug-modules-extra
NoYesDec 09, 2025
CVE-2025-40341MEDIUM5.1
  • Linux KernelLinux Kernel
  • linux-nvidia-tegra
NoYesDec 09, 2025
CVE-2025-40345N/AN/A
  • Linux KernelLinux Kernel
  • kernel-headers
NoYesDec 12, 2025
CVE-2025-40344N/AN/A
  • Linux KernelLinux Kernel
  • linux-azure-6.14
NoYesDec 09, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management