CVE-2022-49606

published 2025-02-26

CVE-2022-49606: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qos_mutex to process RoCEv2 QP's…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Fix sleep from invalid context BUG

Taking the qos_mutex to process RoCEv2 QP's on netdev events causes a
kernel splat.

Fix this by removing the handling for RoCEv2 in
irdma_cm_teardown_connections that uses the mutex. This handling is only
needed for iWARP to avoid having connections established while the link is
down or having connections remain functional after the IP address is
removed.

BUG: sleeping function called from invalid context at kernel/locking/mutex.
Call Trace:
kernel: dump_stack+0x66/0x90
kernel: ___might_sleep.cold.92+0x8d/0x9a
kernel: mutex_lock+0x1c/0x40
kernel: irdma_cm_teardown_connections+0x28e/0x4d0 [irdma]
kernel: ? check_preempt_curr+0x7a/0x90
kernel: ? select_idle_sibling+0x22/0x3c0
kernel: ? select_task_rq_fair+0x94c/0xc90
kernel: ? irdma_exec_cqp_cmd+0xc27/0x17c0 [irdma]
kernel: ? __wake_up_common+0x7a/0x190
kernel: irdma_if_notify+0x3cc/0x450 [irdma]
kernel: ? sched_clock_cpu+0xc/0xb0
kernel: irdma_inet6addr_event+0xc6/0x150 [irdma]

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.18.16-1 (bookworm)	linux 5.18.16-1 (bookworm)
linux	linux	—	—
linux	linux	>= 146b9756f14c04894226fb97e2f102f217139c27 < a4c5115140ed1833197bad9a6b80265840ff427f	a4c5115140ed1833197bad9a6b80265840ff427f
linux	linux	>= 146b9756f14c04894226fb97e2f102f217139c27 < 2cae7e519032e4b4672cb9204d5586a441924364	2cae7e519032e4b4672cb9204d5586a441924364
linux	linux	>= 146b9756f14c04894226fb97e2f102f217139c27 < cc0315564d6eec91c716d314b743321be24c70b3	cc0315564d6eec91c716d314b743321be24c70b3
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 5.18.16-1	5.18.16-1
linux	linux_kernel	>= 0 < 5.18.16-1	5.18.16-1
linux	linux_kernel	>= 0 < 5.18.16-1	5.18.16-1
linux	linux_kernel	>= 5.14 < 5.15.58	5.15.58
linux	linux_kernel	>= 5.16 < 5.18.15	5.18.15

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-667