جزئیات آسیب‌پذیری
CVE-2022-49931
IB/hfi1: Correctly move list in sc_disable()
شرح رسمی (انگلیسی)
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in sc_disable() Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disable()") incorrectly tries to move a list from one list head to another. The result is a kernel crash. The crash is triggered when a link goes down and there are waiters for a send to complete. The following signature is seen: BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] Call Trace: sc_disable+0x1ba/0x240 [hfi1] pio_freeze+0x3d/0x60 [hfi1] handle_freeze+0x27/0x1b0 [hfi1] process_one_work+0x1b0/0x380 ? process_one_work+0x380/0x380 worker_thread+0x30/0x360 ? process_one_work+0x380/0x380 kthread+0xd7/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 The fix is to use the correct call to move the list.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 5.5متوسط | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 8.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Linux | Linux | 5.15 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5d33bd6b4d4d035e42733592899918a18f2540da | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 13bac861952a78664907a0f927d3e874e9a59034 ≤ v < b8bcff99b07cc175a6ee12a52db51cdd2229586c | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 13bac861952a78664907a0f927d3e874e9a59034 ≤ v < 1afac08b39d85437187bb2a92d89a741b1078f55 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 13bac861952a78664907a0f927d3e874e9a59034 ≤ v < ba95409d6b580501ff6d78efd00064f7df669926 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5.10.77 ≤ v < 5.10.154 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5.14.16 ≤ v < 5.15 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5.4.157 ≤ v < 5.4.224 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | d98883f6c33e0d960afedcecaa92fc2b61fec383 ≤ v < 7c4260f8f188df32414a5ecad63e8b934c2aa3f0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | d997d4e4365f7e59cf6b59c70f966c56d704b64f ≤ v < 25760a41e3802f54aadcc31385543665ab349b8e | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۵- https://git.kernel.org/stable/c/25760a41e3802f54aadcc31385543665ab349b8e
- https://git.kernel.org/stable/c/7c4260f8f188df32414a5ecad63e8b934c2aa3f0
- https://git.kernel.org/stable/c/ba95409d6b580501ff6d78efd00064f7df669926
- https://git.kernel.org/stable/c/b8bcff99b07cc175a6ee12a52db51cdd2229586c
- https://git.kernel.org/stable/c/1afac08b39d85437187bb2a92d89a741b1078f55
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۲/۱۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۵/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Linux
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-476NULL Pointer Dereference