Description
In the Linux kernel, the following vulnerability has been resolved: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition The documentation of the function rvt_error_qp says both r_lock and s_lock need to be held when calling that function. It also asserts using lockdep that both of those locks are held. However, the commit I referenced in Fixes accidentally makes the call to rvt_error_qp in rvt_ruc_loopback no longer covered by r_lock. This results in the lockdep assertion failing and also possibly in a race condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d757c60eca9b22f4d108929a24401e0fdecda0b1 to < 8a50937227c385a477177c9ffa122b4230e40666affectedd757c60eca9b22f4d108929a24401e0fdecda0b1 to < 43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0affectedd757c60eca9b22f4d108929a24401e0fdecda0b1 to < 92f1947c0d26060e978b3a9f21f32ce7c8c9cca3affectedd757c60eca9b22f4d108929a24401e0fdecda0b1 to < 77ffb2495a41098f9d6a14f8aefde3188da75944affectedd757c60eca9b22f4d108929a24401e0fdecda0b1 to < 57800cc36e55db0547461c49acf5cd84c0f502b0affectedd757c60eca9b22f4d108929a24401e0fdecda0b1 to < 4d809f69695d4e7d1378b3a072fa9aef23123018affected25636de95557a95d54ac30be94af3748345a0a90affected5.0.4 to < 5.1affected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected5.4.189 to ≤ 5.4.*unaffected5.10.111 to ≤ 5.10.*unaffected5.15.34 to ≤ 5.15.*unaffected5.16.20 to ≤ 5.16.*unaffected5.17.3 to ≤ 5.17.*unaffected5.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666 ↗
- https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0 ↗
- https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3 ↗
- https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944 ↗
- https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0 ↗
- https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018 ↗