CVE-2022-49429 (GCVE-0-2022-49429)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:12 – Updated: 2025-12-23 13:23
VLAI?
Title
RDMA/hfi1: Prevent panic when SDMA is disabled
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1_CAP_SDMA off, a call to hfi1_write_iter() will dereference a NULL pointer and panic. A typical stack frame is: sdma_select_user_engine [hfi1] hfi1_user_sdma_process_request [hfi1] hfi1_write_iter [hfi1] do_iter_readv_writev do_iter_write vfs_writev do_writev do_syscall_64 The fix is to test for SDMA in hfi1_write_iter() and fail the I/O with EINVAL.
Severity ?
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < 33794e8e9bcb4affc0ebff9cdec85acc8b8a1762 (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < 0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < e60ad83f645ee6fadd5a8057ba267aeec54f08fe (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < cc80d3c37cec9d6ddb140483647901bc7cc6c31d (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < 32e6aea33944f364d51cd263e4cd236393a188b6 (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < 29952ab85d6c3fe0b7909d9a737f10c58bf6824d (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < 22e7e400fd1a890db2ea13686324aff50e972f4f (git)
Affected: 0cb2aa690c7ef14ad1f544288349abb5434bb75d , < 629e052d0c98e46dde9f0824f0aa437f678d9b8f (git)
Create a notification for this product.
    Linux Linux Affected: 4.9
Unaffected: 0 , < 4.9 (semver)
Unaffected: 4.14.283 , ≤ 4.14.* (semver)
Unaffected: 4.19.247 , ≤ 4.19.* (semver)
Unaffected: 5.4.198 , ≤ 5.4.* (semver)
Unaffected: 5.10.121 , ≤ 5.10.* (semver)
Unaffected: 5.15.46 , ≤ 5.15.* (semver)
Unaffected: 5.17.14 , ≤ 5.17.* (semver)
Unaffected: 5.18.3 , ≤ 5.18.* (semver)
Unaffected: 5.19 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/hw/hfi1/file_ops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "33794e8e9bcb4affc0ebff9cdec85acc8b8a1762",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "e60ad83f645ee6fadd5a8057ba267aeec54f08fe",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "cc80d3c37cec9d6ddb140483647901bc7cc6c31d",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "32e6aea33944f364d51cd263e4cd236393a188b6",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "29952ab85d6c3fe0b7909d9a737f10c58bf6824d",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "22e7e400fd1a890db2ea13686324aff50e972f4f",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            },
            {
              "lessThan": "629e052d0c98e46dde9f0824f0aa437f678d9b8f",
              "status": "affected",
              "version": "0cb2aa690c7ef14ad1f544288349abb5434bb75d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/hw/hfi1/file_ops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "lessThan": "4.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.283",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.247",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.121",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.283",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.247",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.198",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.121",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.46",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.14",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.3",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Prevent panic when SDMA is disabled\n\nIf the hfi1 module is loaded with HFI1_CAP_SDMA off, a call to\nhfi1_write_iter() will dereference a NULL pointer and panic. A typical\nstack frame is:\n\n  sdma_select_user_engine [hfi1]\n  hfi1_user_sdma_process_request [hfi1]\n  hfi1_write_iter [hfi1]\n  do_iter_readv_writev\n  do_iter_write\n  vfs_writev\n  do_writev\n  do_syscall_64\n\nThe fix is to test for SDMA in hfi1_write_iter() and fail the I/O with\nEINVAL."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-23T13:23:53.080Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/33794e8e9bcb4affc0ebff9cdec85acc8b8a1762"
        },
        {
          "url": "https://git.kernel.org/stable/c/0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f"
        },
        {
          "url": "https://git.kernel.org/stable/c/e60ad83f645ee6fadd5a8057ba267aeec54f08fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/cc80d3c37cec9d6ddb140483647901bc7cc6c31d"
        },
        {
          "url": "https://git.kernel.org/stable/c/32e6aea33944f364d51cd263e4cd236393a188b6"
        },
        {
          "url": "https://git.kernel.org/stable/c/29952ab85d6c3fe0b7909d9a737f10c58bf6824d"
        },
        {
          "url": "https://git.kernel.org/stable/c/22e7e400fd1a890db2ea13686324aff50e972f4f"
        },
        {
          "url": "https://git.kernel.org/stable/c/629e052d0c98e46dde9f0824f0aa437f678d9b8f"
        }
      ],
      "title": "RDMA/hfi1: Prevent panic when SDMA is disabled",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49429",
    "datePublished": "2025-02-26T02:12:48.646Z",
    "dateReserved": "2025-02-26T02:08:31.569Z",
    "dateUpdated": "2025-12-23T13:23:53.080Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.