CVE-2022-49931

Description

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in sc_disable() Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disable()") incorrectly tries to move a list from one list head to another. The result is a kernel crash. The crash is triggered when a link goes down and there are waiters for a send to complete. The following signature is seen: BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] Call Trace: sc_disable+0x1ba/0x240 [hfi1] pio_freeze+0x3d/0x60 [hfi1] handle_freeze+0x27/0x1b0 [hfi1] process_one_work+0x1b0/0x380 ? process_one_work+0x380/0x380 worker_thread+0x30/0x360 ? process_one_work+0x380/0x380 kthread+0xd7/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 The fix is to use the correct call to move the list.

Reserved 2025-05-01 | Published 2025-05-01 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

d997d4e4365f7e59cf6b59c70f966c56d704b64f before 25760a41e3802f54aadcc31385543665ab349b8e
affected

d98883f6c33e0d960afedcecaa92fc2b61fec383 before 7c4260f8f188df32414a5ecad63e8b934c2aa3f0
affected

13bac861952a78664907a0f927d3e874e9a59034 before ba95409d6b580501ff6d78efd00064f7df669926
affected

13bac861952a78664907a0f927d3e874e9a59034 before b8bcff99b07cc175a6ee12a52db51cdd2229586c
affected

13bac861952a78664907a0f927d3e874e9a59034 before 1afac08b39d85437187bb2a92d89a741b1078f55
affected

5d33bd6b4d4d035e42733592899918a18f2540da
affected

Default status
affected

5.15
affected

Any version before 5.15
unaffected

5.4.224
unaffected

5.10.154
unaffected

5.15.78
unaffected

6.0.8
unaffected

6.1
unaffected

References

git.kernel.org/...c/25760a41e3802f54aadcc31385543665ab349b8e

git.kernel.org/...c/7c4260f8f188df32414a5ecad63e8b934c2aa3f0

git.kernel.org/...c/ba95409d6b580501ff6d78efd00064f7df669926

git.kernel.org/...c/b8bcff99b07cc175a6ee12a52db51cdd2229586c

git.kernel.org/...c/1afac08b39d85437187bb2a92d89a741b1078f55

cve.org (CVE-2022-49931)

nvd.nist.gov (CVE-2022-49931)

Download JSON