Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-48788

nvme-rdma: fix possible use-after-free in transport error_recovery work

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work While nvme_rdma_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7110230719602852481c2793d054f866b2bf4a2b to < 5593f72d1922403c11749532e3a0aa4cf61414e9affected
  • 7110230719602852481c2793d054f866b2bf4a2b to < d411b2a5da68b8a130c23097014434ac140a2aceaffected
  • 7110230719602852481c2793d054f866b2bf4a2b to < 324f5bdc52ecb6a6dadb31a62823ef8c709d1439affected
  • 7110230719602852481c2793d054f866b2bf4a2b to < 646952b2210f19e584d2bf9eb5d092abdca2fcc1affected
  • 7110230719602852481c2793d054f866b2bf4a2b to < ea86027ac467a055849c4945906f799e7f65ab99affected
  • 7110230719602852481c2793d054f866b2bf4a2b to < b6bb1722f34bbdbabed27acdceaf585d300c5fd2affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 4.19.231 to ≤ 4.19.*unaffected
  • 5.4.181 to ≤ 5.4.*unaffected
  • 5.10.102 to ≤ 5.10.*unaffected
  • 5.15.25 to ≤ 5.15.*unaffected
  • 5.16.11 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References