CVE-2022-50494: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50494 is a vulnerability discovered in the Linux kernel's thermal management system, specifically in the intelpowerclamp component. The issue was identified when CPU 0 is offline and intelpowerclamp is used to inject idle, which generates a kernel BUG due to improper use of smpprocessorid() in preemptible code (NVD).

The vulnerability occurs in the powerclampsetcurstate function where smpprocessorid() is used in a preemptible context. When CPU 0 (the default control CPU) is offline, the system attempts to change to the current CPU, but this check needs to be performed under cpusreadlock(). The improper use of smpprocessor_id() in this context leads to a kernel BUG warning (NVD).

When triggered, this vulnerability causes a kernel BUG warning and potential system instability. The issue specifically affects systems using the intel_powerclamp feature for CPU power management, particularly when CPU 0 is taken offline (NVD).

The vulnerability has been resolved by replacing smpprocessorid() with get_cpu() to avoid the BUG condition. This fix ensures proper CPU state management when the control CPU is offline (NVD).