Database/Control plane, storage & DevOps
Linux perf/x86/amd - race between amd_pmu_enable_all, perf NMI and throttling: A race between AMD PMU enablement
CVSS 4.7CVE-2022-49781Control plane, storage & DevOpscurated
Impact
A race between AMD PMU enablement, the perf NMI handler and event throttling crashes the host. Performance counters are enabled by every profiling and observability agent, and throttling kicks in precisely when counters are busy - so the crash window opens under exactly the monitoring load an AI cluster runs continuously.
Who can reach it
Local, through perf event enablement. Reachable by node observability agents and, where perf_event_paranoid is relaxed, by tenants.
What to do
Distro kernel update plus reboot; no firmware step.
References
Related entries
- Intel Neural Compressor (TOCTOU): A time-of-check/time-of-use race in Neural Compressor lets an authenticated localCVE-2024-21792 · Intel Neural Compressor (TOCTOU)Medium
- GitLab: stored XSS via pasted HTML in the Content EditorCVE-2026-19619 · GitLab CE/EE (Content Editor, pasted HTML sanitization)Medium
- Rittal CMC III cabinet lock / access-card system: The access cards used to open control cabinets secured with RittalCVE-2022-40633 · Rittal CMC III cabinet lock / access-card systemMedium
- Keycloak: Redirect scheme filtering bypassed by appending a wildcardCVE-2023-6134 · KeycloakMedium
- Keycloak: Wildcard in the JARM form_post.jwt response modeCVE-2023-6927 · KeycloakMedium
- MinIO (SFTP gateway): The SFTP frontend trusts an SSH public key it should not, letting an attacker authenticate asCVE-2025-27414 · MinIO (SFTP gateway)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.