{"id":"CVE-2022-49429","state":"PUBLISHED","title":"RDMA/hfi1: Prevent panic when SDMA is disabled","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Prevent panic when SDMA is disabled\n\nIf the hfi1 module is loaded with HFI1_CAP_SDMA off, a call to\nhfi1_write_iter() will dereference a NULL pointer and panic. A typical\nstack frame is:\n\n  sdma_select_user_engine [hfi1]\n  hfi1_user_sdma_process_request [hfi1]\n  hfi1_write_iter [hfi1]\n  do_iter_readv_writev\n  do_iter_write\n  vfs_writev\n  do_writev\n  do_syscall_64\n\nThe fix is to test for SDMA in hfi1_write_iter() and fail the I/O with\nEINVAL.","publishedAt":"2025-02-26T02:12:48.646Z","updatedAt":"2026-05-11T18:59:38.941Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"33794e8e9bcb4affc0ebff9cdec85acc8b8a1762","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"e60ad83f645ee6fadd5a8057ba267aeec54f08fe","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"cc80d3c37cec9d6ddb140483647901bc7cc6c31d","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"32e6aea33944f364d51cd263e4cd236393a188b6","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"29952ab85d6c3fe0b7909d9a737f10c58bf6824d","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"22e7e400fd1a890db2ea13686324aff50e972f4f","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"629e052d0c98e46dde9f0824f0aa437f678d9b8f","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hfi1/file_ops.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.9","versionType":"semver"},{"version":"4.14.283","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.247","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.198","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.121","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.46","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.17.14","status":"unaffected","lessThanOrEqual":"5.17.*","versionType":"semver"},{"version":"5.18.3","status":"unaffected","lessThanOrEqual":"5.18.*","versionType":"semver"},{"version":"5.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hfi1/file_ops.c"]}],"references":["https://git.kernel.org/stable/c/33794e8e9bcb4affc0ebff9cdec85acc8b8a1762","https://git.kernel.org/stable/c/0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f","https://git.kernel.org/stable/c/e60ad83f645ee6fadd5a8057ba267aeec54f08fe","https://git.kernel.org/stable/c/cc80d3c37cec9d6ddb140483647901bc7cc6c31d","https://git.kernel.org/stable/c/32e6aea33944f364d51cd263e4cd236393a188b6","https://git.kernel.org/stable/c/29952ab85d6c3fe0b7909d9a737f10c58bf6824d","https://git.kernel.org/stable/c/22e7e400fd1a890db2ea13686324aff50e972f4f","https://git.kernel.org/stable/c/629e052d0c98e46dde9f0824f0aa437f678d9b8f"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49429.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49429","state":"PUBLISHED","datePublished":"2025-02-26T02:12:48.646Z","dateUpdated":"2026-05-11T18:59:38.941Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-02-26T02:08:31.569Z"},"containers":{"cna":{"title":"RDMA/hfi1: Prevent panic when SDMA is disabled","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Prevent panic when SDMA is disabled\n\nIf the hfi1 module is loaded with HFI1_CAP_SDMA off, a call to\nhfi1_write_iter() will dereference a NULL pointer and panic. A typical\nstack frame is:\n\n  sdma_select_user_engine [hfi1]\n  hfi1_user_sdma_process_request [hfi1]\n  hfi1_write_iter [hfi1]\n  do_iter_readv_writev\n  do_iter_write\n  vfs_writev\n  do_writev\n  do_syscall_64\n\nThe fix is to test for SDMA in hfi1_write_iter() and fail the I/O with\nEINVAL."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"33794e8e9bcb4affc0ebff9cdec85acc8b8a1762","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"e60ad83f645ee6fadd5a8057ba267aeec54f08fe","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"cc80d3c37cec9d6ddb140483647901bc7cc6c31d","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"32e6aea33944f364d51cd263e4cd236393a188b6","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"29952ab85d6c3fe0b7909d9a737f10c58bf6824d","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"22e7e400fd1a890db2ea13686324aff50e972f4f","versionType":"git"},{"version":"0cb2aa690c7ef14ad1f544288349abb5434bb75d","status":"affected","lessThan":"629e052d0c98e46dde9f0824f0aa437f678d9b8f","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hfi1/file_ops.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.9","versionType":"semver"},{"version":"4.14.283","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.247","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.198","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.121","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.46","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.17.14","status":"unaffected","lessThanOrEqual":"5.17.*","versionType":"semver"},{"version":"5.18.3","status":"unaffected","lessThanOrEqual":"5.18.*","versionType":"semver"},{"version":"5.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/infiniband/hw/hfi1/file_ops.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/33794e8e9bcb4affc0ebff9cdec85acc8b8a1762"},{"url":"https://git.kernel.org/stable/c/0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f"},{"url":"https://git.kernel.org/stable/c/e60ad83f645ee6fadd5a8057ba267aeec54f08fe"},{"url":"https://git.kernel.org/stable/c/cc80d3c37cec9d6ddb140483647901bc7cc6c31d"},{"url":"https://git.kernel.org/stable/c/32e6aea33944f364d51cd263e4cd236393a188b6"},{"url":"https://git.kernel.org/stable/c/29952ab85d6c3fe0b7909d9a737f10c58bf6824d"},{"url":"https://git.kernel.org/stable/c/22e7e400fd1a890db2ea13686324aff50e972f4f"},{"url":"https://git.kernel.org/stable/c/629e052d0c98e46dde9f0824f0aa437f678d9b8f"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T18:59:38.941Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"4.14.283"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"4.19.247"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"5.4.198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"5.10.121"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"5.15.46"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"5.17.14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"5.18.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"5.19"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}