CVE - CVE-2022-49089

CVE-ID
CVE-2022-49089	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition The documentation of the function rvt_error_qp says both r_lock and s_lock need to be held when calling that function. It also asserts using lockdep that both of those locks are held. However, the commit I referenced in Fixes accidentally makes the call to rvt_error_qp in rvt_ruc_loopback no longer covered by r_lock. This results in the lockdep assertion failing and also possibly in a race condition.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0 URL:https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0 MISC:https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018 URL:https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018 MISC:https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0 URL:https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0 MISC:https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944 URL:https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944 MISC:https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666 URL:https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666 MISC:https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3 URL:https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)