CVE-2022-49118: scsi: hisi_sas: Free irq vectors in order for v3 HW
In the Linux kernel, the following vulnerability has been resolved:
scsi: hisisas: Free irq vectors in order for v3 HW
If the driver probe fails to request the channel IRQ or fatal IRQ, the driver will free the IRQ vectors before freeing the IRQs in freeirq(), and this will cause a kernel BUG like this:
------------[ cut here ]------------ kernel BUG at drivers/pci/msi.c:369! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP Call trace: freemsiirqs+0x118/0x13c pcidisablemsi+0xfc/0x120 pcifreeirqvectors+0x24/0x3c hisisasv3probe+0x360/0x9d0 [hisisasv3hw] localpciprobe+0x44/0xb0 workforcpufn+0x20/0x34 processonework+0x1d0/0x340 workerthread+0x2e0/0x460 kthread+0x180/0x190 retfromfork+0x10/0x20 ---[ end trace b88990335b610c11 ]---
So we use devmaddaction() to control the order in which we free the vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49118?
CVE-2022-49118 has been classified with a severity rating that indicates it poses a potential risk to system stability and reliability.
How do I fix CVE-2022-49118?
To fix CVE-2022-49118, it is essential to update the Linux kernel to the latest patched version provided by your distribution.
What are the potential impacts of CVE-2022-49118?
The potential impacts of CVE-2022-49118 include system crashes or instability due to improper IRQ vector management in the hisi_sas driver.
Which systems are affected by CVE-2022-49118?
CVE-2022-49118 affects systems running specific versions of the Linux kernel that utilize the hisi_sas driver.
Is CVE-2022-49118 related to hardware interaction?
Yes, CVE-2022-49118 involves the interaction between the Linux kernel and hardware concerning the management of IRQ vectors in SCSI devices.