CVE-2022-49089
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49089
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49089.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49089
- Related
- Published
- 2025-02-26T07:00:46Z
- Modified
- 2025-02-26T19:00:58.176218Z
- Downstream
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
IB/rdmavt: add lock to call to rvterrorqp to prevent a race condition
The documentation of the function rvterrorqp says both rlock and slock need to be held when calling that function. It also asserts using lockdep that both of those locks are held. However, the commit I referenced in Fixes accidentally makes the call to rvterrorqp in rvtrucloopback no longer covered by r_lock. This results in the lockdep assertion failing and also possibly in a race condition.
- References
-
- https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0
- https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018
- https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0
- https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944
- https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666
- https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3
- https://security-tracker.debian.org/tracker/CVE-2022-49089
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.10.113-1
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source