CVE-2022-49931: IB/hfi1: Correctly move list in sc_disable()
First published: Thu May 01 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in sc_disable() Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disable()") incorrectly tries to move a list from one list head to another. The result is a kernel crash. The crash is triggered when a link goes down and there are waiters for a send to complete. The following signature is seen: BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] Call Trace: sc_disable+0x1ba/0x240 [hfi1] pio_freeze+0x3d/0x60 [hfi1] handle_freeze+0x27/0x1b0 [hfi1] process_one_work+0x1b0/0x380 ? process_one_work+0x380/0x380 worker_thread+0x30/0x360 ? process_one_work+0x380/0x380 kthread+0xd7/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 The fix is to use the correct call to move the list.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/25760a41e3802f54aadcc31385543665ab349b8e
- https://git.kernel.org/stable/c/7c4260f8f188df32414a5ecad63e8b934c2aa3f0
- https://git.kernel.org/stable/c/ba95409d6b580501ff6d78efd00064f7df669926
- https://git.kernel.org/stable/c/b8bcff99b07cc175a6ee12a52db51cdd2229586c
- https://git.kernel.org/stable/c/1afac08b39d85437187bb2a92d89a741b1078f55
Frequently Asked Questions
What is the severity of CVE-2022-49931?
CVE-2022-49931 has been classified with a high severity due to its potential to cause kernel crashes.
How do I fix CVE-2022-49931?
To fix CVE-2022-49931, upgrade your Linux kernel to the latest version where the vulnerability has been addressed.
What systems are affected by CVE-2022-49931?
CVE-2022-49931 affects various distributions of the Linux kernel.
What type of vulnerability is CVE-2022-49931?
CVE-2022-49931 is a kernel vulnerability related to incorrect list handling in the IB/hfi1 driver.
What are the implications of CVE-2022-49931 for users?
Users may experience system instability and crashes if they do not address CVE-2022-49931.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel