CVE-2022-49429
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49429
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49429.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49429
- Related
- Published
- 2025-02-26T07:01:19Z
- Modified
- 2025-02-26T19:01:21.458203Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: Prevent panic when SDMA is disabled
If the hfi1 module is loaded with HFI1CAPSDMA off, a call to hfi1writeiter() will dereference a NULL pointer and panic. A typical stack frame is:
sdmaselectuserengine [hfi1] hfi1usersdmaprocessrequest [hfi1] hfi1writeiter [hfi1] doiterreadvwritev doiterwrite vfswritev dowritev dosyscall64
The fix is to test for SDMA in hfi1writeiter() and fail the I/O with EINVAL.
- References
-
- https://git.kernel.org/stable/c/0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f
- https://git.kernel.org/stable/c/22e7e400fd1a890db2ea13686324aff50e972f4f
- https://git.kernel.org/stable/c/29952ab85d6c3fe0b7909d9a737f10c58bf6824d
- https://git.kernel.org/stable/c/32e6aea33944f364d51cd263e4cd236393a188b6
- https://git.kernel.org/stable/c/33794e8e9bcb4affc0ebff9cdec85acc8b8a1762
- https://git.kernel.org/stable/c/629e052d0c98e46dde9f0824f0aa437f678d9b8f
- https://git.kernel.org/stable/c/cc80d3c37cec9d6ddb140483647901bc7cc6c31d
- https://git.kernel.org/stable/c/e60ad83f645ee6fadd5a8057ba267aeec54f08fe
- https://security-tracker.debian.org/tracker/CVE-2022-49429
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.10.127-1
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source