CVE-2022-49929

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49929
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49929.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49929
Downstream
Related
Published
2025-05-01T14:11:06Z
Modified
2025-10-21T11:19:56.141028Z
Summary
RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix mr leak in RESPSTERRRNR

rxerecheckmr() will increase mr's refcnt, so we should call rxeput(mr) to drop mr's refcnt in RESPSTERR_RNR to avoid below warning:

WARNING: CPU: 0 PID: 4156 at drivers/infiniband/sw/rxe/rxepool.c:259 _rxecleanup+0x1df/0x240 [rdmarxe] ... Call Trace: rxederegmr+0x4c/0x60 [rdmarxe] ibderegmruser+0xa8/0x200 [ibcore] ibmrpooldestroy+0x77/0xb0 [ibcore] nvmerdmadestroyqueueib+0x89/0x240 [nvmerdma] nvmerdmafreequeue+0x40/0x50 [nvmerdma] nvmerdmateardownioqueues.part.0+0xc3/0x120 [nvmerdma] nvmerdmaerrorrecoverywork+0x4d/0xf0 [nvmerdma] processonework+0x582/0xa40 ? pwqdecnrinflight+0x100/0x100 ? rwlockbug.part.0+0x60/0x60 workerthread+0x2a9/0x700 ? processonework+0xa40/0xa40 kthread+0x168/0x1a0 ? kthreadcompleteandexit+0x20/0x20 retfrom_fork+0x22/0x30

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a1a0be894da0d06bfbb496cc2dc3057fa83e103
Fixed
50b35ad2864a9d66f802f9ce193d99bbef64e219
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a1a0be894da0d06bfbb496cc2dc3057fa83e103
Fixed
b5f9a01fae42684648c2ee3cd9985f80c67ab9f7

Affected versions

v5.*

v5.17
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.1-rc1

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b35ad2864a9d66f802f9ce193d99bbef64e219",
        "target": {
            "file": "drivers/infiniband/sw/rxe/rxe_resp.c"
        },
        "deprecated": false,
        "id": "CVE-2022-49929-013b0669",
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "56205096794023712728988697188473887487",
                "24215790160211230188223709083881219686",
                "279396475854756330532631480180652548962",
                "286243915192067763893496054118354361531",
                "122611546984313973945783513093076871633"
            ]
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5f9a01fae42684648c2ee3cd9985f80c67ab9f7",
        "target": {
            "function": "read_reply",
            "file": "drivers/infiniband/sw/rxe/rxe_resp.c"
        },
        "deprecated": false,
        "id": "CVE-2022-49929-06c7e1a1",
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "length": 1815.0,
            "function_hash": "17812368680604885937119028523227249123"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b35ad2864a9d66f802f9ce193d99bbef64e219",
        "target": {
            "function": "read_reply",
            "file": "drivers/infiniband/sw/rxe/rxe_resp.c"
        },
        "deprecated": false,
        "id": "CVE-2022-49929-38f2cee6",
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "length": 1815.0,
            "function_hash": "17812368680604885937119028523227249123"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5f9a01fae42684648c2ee3cd9985f80c67ab9f7",
        "target": {
            "file": "drivers/infiniband/sw/rxe/rxe_resp.c"
        },
        "deprecated": false,
        "id": "CVE-2022-49929-a8720544",
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "56205096794023712728988697188473887487",
                "24215790160211230188223709083881219686",
                "279396475854756330532631480180652548962",
                "286243915192067763893496054118354361531",
                "122611546984313973945783513093076871633"
            ]
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.0.8