In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: Prevent panic when SDMA is disabled
If the hfi1 module is loaded with HFI1CAPSDMA off, a call to hfi1writeiter() will dereference a NULL pointer and panic. A typical stack frame is:
sdmaselectuserengine [hfi1] hfi1usersdmaprocessrequest [hfi1] hfi1writeiter [hfi1] doiterreadvwritev doiterwrite vfswritev dowritev dosyscall64
The fix is to test for SDMA in hfi1writeiter() and fail the I/O with EINVAL.
[
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@629e052d0c98e46dde9f0824f0aa437f678d9b8f",
"signature_type": "Line",
"id": "CVE-2022-49429-10355dfd"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29952ab85d6c3fe0b7909d9a737f10c58bf6824d",
"signature_type": "Function",
"id": "CVE-2022-49429-31a3b733"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc80d3c37cec9d6ddb140483647901bc7cc6c31d",
"signature_type": "Function",
"id": "CVE-2022-49429-3258d56e"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f",
"signature_type": "Function",
"id": "CVE-2022-49429-38a4411f"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f",
"signature_type": "Line",
"id": "CVE-2022-49429-3e4dd25b"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29952ab85d6c3fe0b7909d9a737f10c58bf6824d",
"signature_type": "Line",
"id": "CVE-2022-49429-3eb082a5"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22e7e400fd1a890db2ea13686324aff50e972f4f",
"signature_type": "Function",
"id": "CVE-2022-49429-73293849"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33794e8e9bcb4affc0ebff9cdec85acc8b8a1762",
"signature_type": "Function",
"id": "CVE-2022-49429-74a9c555"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc80d3c37cec9d6ddb140483647901bc7cc6c31d",
"signature_type": "Line",
"id": "CVE-2022-49429-a2819ab3"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32e6aea33944f364d51cd263e4cd236393a188b6",
"signature_type": "Line",
"id": "CVE-2022-49429-b0bd925d"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e60ad83f645ee6fadd5a8057ba267aeec54f08fe",
"signature_type": "Function",
"id": "CVE-2022-49429-b1981543"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@629e052d0c98e46dde9f0824f0aa437f678d9b8f",
"signature_type": "Function",
"id": "CVE-2022-49429-c5ca2604"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22e7e400fd1a890db2ea13686324aff50e972f4f",
"signature_type": "Line",
"id": "CVE-2022-49429-c678d0ff"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e60ad83f645ee6fadd5a8057ba267aeec54f08fe",
"signature_type": "Line",
"id": "CVE-2022-49429-ce40d862"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"line_hashes": [
"63989539052141975376221422719467669718",
"78309816656015761784166533319534539003",
"330319752076569084041882910369606447588"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33794e8e9bcb4affc0ebff9cdec85acc8b8a1762",
"signature_type": "Line",
"id": "CVE-2022-49429-ce728157"
},
{
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "hfi1_write_iter",
"file": "drivers/infiniband/hw/hfi1/file_ops.c"
},
"digest": {
"function_hash": "24315024210552489426397685264443048572",
"length": 932.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32e6aea33944f364d51cd263e4cd236393a188b6",
"signature_type": "Function",
"id": "CVE-2022-49429-df44b696"
}
]