CVE-2022-49925

MEDIUM

Linux Kernel 4.3-5.4.223 5.5-5.10.153 5.11-5.15.77 5.16-6.0.7 - Null Pointer Dereference in ib_core_cleanup

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ib_core_cleanup() KASAN reported a null-ptr-deref error: KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] CPU: 1 PID: 379 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:destroy_workqueue+0x2f/0x740 RSP: 0018:ffff888016137df8 EFLAGS: 00000202 ... Call Trace: ib_core_cleanup+0xa/0xa1 [ib_core] __do_sys_delete_module.constprop.0+0x34f/0x5b0 do_syscall_64+0x3a/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa1a0d221b7 ... It is because the fail of roce_gid_mgmt_init() is ignored: ib_core_init() roce_gid_mgmt_init() gid_cache_wq = alloc_ordered_workqueue # fail ... ib_core_cleanup() roce_gid_mgmt_cleanup() destroy_workqueue(gid_cache_wq) # destroy an unallocated wq Fix this by catching the fail of roce_gid_mgmt_init() in ib_core_init().

Scores

CVSS v3 5.5
EPSS 0.0017
EPSS Percentile 6.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (18)
linux/Kernel 4.3.0 - 5.4.224linux
linux/Kernel 5.11.0 - 5.15.78linux
linux/Kernel 5.16.0 - 6.0.8linux
linux/Kernel 5.5.0 - 5.10.154linux
Linux/Linux < 4.3
Linux/Linux 03db3a2d81e6e84f3ed3cb9e087cae17d762642b - 07c0d131cc0fe1f3981a42958fc52d573d303d89
Linux/Linux 03db3a2d81e6e84f3ed3cb9e087cae17d762642b - 6b3d5dcb12347f3518308c2c9d2cf72453a3e1e5
Linux/Linux 03db3a2d81e6e84f3ed3cb9e087cae17d762642b - ab817f75e5e0fa58d9be0825da6a7b7d8a1fa1d9
Linux/Linux 03db3a2d81e6e84f3ed3cb9e087cae17d762642b - af8fb5a0600e9ae29950e9422a032c3c22649ee5
Linux/Linux 03db3a2d81e6e84f3ed3cb9e087cae17d762642b - d360e875c011a005628525bf290322058927e7dc
... and 8 more
Published May 01, 2025
Tracked Since Feb 18, 2026