CVE-2022-49089IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition The documentation of the function rvt_error_qp says both r_lock and s_lock need to be held when calling that function. It also asserts using lockdep that both of those locks are held. However, the commit I referenced in Fixes accidentally makes the call to rvt_error_qp in rvt_ruc_loopback no longer covered by r_lock. This results in the lockdep assertion failing and also possibly in a race condition.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from d757c60eca9b22f4d108929a24401e0fdecda0b1 before 8a50937227c385a477177c9ffa122b4230e40666; from d757c60eca9b22f4d108929a24401e0fdecda0b1 before 43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0; from d757c60eca9b22f4d108929a24401e0fdecda0b1 before 92f1947c0d26060e978b3a9f21f32ce7c8c9cca3; from d757c60eca9b22f4d108929a24401e0fdecda0b1 before 77ffb2495a41098f9d6a14f8aefde3188da75944; from d757c60eca9b22f4d108929a24401e0fdecda0b1 before 57800cc36e55db0547461c49acf5cd84c0f502b0; from d757c60eca9b22f4d108929a24401e0fdecda0b1 before 4d809f69695d4e7d1378b3a072fa9aef23123018; 25636de95557a95d54ac30be94af3748345a0a90; from 5.0.4 before 5.1 | CNA record |
linux linux_kernel linux:linux_kernel | from 5.0.4 before 5.4.189; from 5.5 before 5.10.111; from 5.11 before 5.15.34; from 5.16 before 5.16.20; from 5.17 before 5.17.3; 5.18 | NVD |
References
- https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666patch
- https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0patch
- https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3patch
- https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944patch
- https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0patch
- https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.