CVE-2022-49089

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49089
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49089.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49089
Downstream
Related
Published
2025-02-26T07:00:46Z
Modified
2025-09-23T18:11:30Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

IB/rdmavt: add lock to call to rvterrorqp to prevent a race condition

The documentation of the function rvterrorqp says both rlock and slock need to be held when calling that function. It also asserts using lockdep that both of those locks are held. However, the commit I referenced in Fixes accidentally makes the call to rvterrorqp in rvtrucloopback no longer covered by r_lock. This results in the lockdep assertion failing and also possibly in a race condition.

References

Affected packages