In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix call trace observed during I/O with CMF enabled
The following was seen with CMF enabled:
BUG: using smpprocessorid() in preemptible code: systemd-udevd/31711 kernel: caller is lpfcupdatecmfcmd+0x214/0x420 [lpfc] kernel: CPU: 12 PID: 31711 Comm: systemd-udevd kernel: Call Trace: kernel: <TASK> kernel: dumpstacklvl+0x44/0x57 kernel: checkpreemptiondisabled+0xbf/0xe0 kernel: lpfcupdatecmfcmd+0x214/0x420 [lpfc] kernel: lpfcnvmefcpiosubmit+0x23b4/0x4df0 [lpfc]
thiscpuptr() calls smpprocessorid() in a preemptible context.
Fix by using percpuptr() with rawsmpprocessor_id() instead.
[
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c",
"function": "lpfc_update_cmf_cmd"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6d45f67a11136cb88a70a29ab22ea6db8ae6bd5",
"digest": {
"length": 737.0,
"function_hash": "263999513435577542527505645989002835149"
},
"id": "CVE-2022-49537-0f8b06d6"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6d45f67a11136cb88a70a29ab22ea6db8ae6bd5",
"digest": {
"line_hashes": [
"219656927204132184599454274530046761134",
"38321439074163431192172122879907760807",
"86349320209626101125567671880854743199",
"102878966772767951901419285007242397993",
"217811690778488974376773720849076344106",
"20959903151311402959322806723557342739",
"176859291608841856155475577005498959371",
"94308223431483111773366469405563889023"
],
"threshold": 0.9
},
"id": "CVE-2022-49537-52fb43ae"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/scsi/lpfc/lpfc_scsi.c",
"function": "lpfc_update_cmf_cmpl"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6d45f67a11136cb88a70a29ab22ea6db8ae6bd5",
"digest": {
"length": 380.0,
"function_hash": "92664278304404604782288612818254265717"
},
"id": "CVE-2022-49537-f2398e5f"
}
]