Linux Kernel Vulnerability in LoongArch CPU Information Display

CVE-2022-50223

What is CVE-2022-50223?

A vulnerability in the Linux kernel's handling of CPU information for LoongArch architecture could lead to runtime warnings when displaying information from /proc/cpuinfo. This occurs when specific configurations, namely CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS, are enabled. The issue arises from the incorrect use of NR_CPUS instead of the runtime limit, nr_cpu_ids, causing inaccurate information and potential confusion during system diagnostics. A resolution has been implemented to eliminate these warnings by correcting the CPU iteration process.

References