CVE-2022-49156
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49156
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49156.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-49156
- Related
- Published
- 2025-02-26T07:00:52Z
- Modified
- 2025-02-26T19:01:52.309957Z
- Downstream
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix scheduling while atomic
The driver makes a call into midlayer (fcremoteport_delete) which can put the thread to sleep. The thread that originates the call is in interrupt context. The combination of the two trigger a crash. Schedule the call in non-interrupt context where it is more safe.
kernel: BUG: scheduling while atomic: swapper/7/0/0x00010000 kernel: Call Trace: kernel: <IRQ> kernel: dumpstack+0x66/0x81 kernel: _schedulebug.cold.90+0x5/0x1d kernel: _schedule+0x7af/0x960 kernel: schedule+0x28/0x80 kernel: scheduletimeout+0x26d/0x3b0 kernel: waitforcompletion+0xb4/0x140 kernel: ? wakeupq+0x70/0x70 kernel: _waitrcugp+0x12c/0x160 kernel: ? sdevevtalloc+0xc0/0x180 [scsimod] kernel: synchronizesched+0x6c/0x80 kernel: ? callrcubh+0x20/0x20 kernel: ? _bpftracercuinvokecallback+0x10/0x10 kernel: sdevevtalloc+0xfd/0x180 [scsimod] kernel: stargetforeachdevice+0x85/0xb0 [scsimod] kernel: ? scsiinitio+0x360/0x3d0 [scsimod] kernel: scsiinitio+0x388/0x3d0 [scsimod] kernel: deviceforeachchild+0x54/0x90 kernel: fcremoteportdelete+0x70/0xe0 [scsitransportfc] kernel: qla2x00schedulerportdel+0x62/0xf0 [qla2xxx] kernel: qla2x00markdevicelost+0x9c/0xd0 [qla2xxx] kernel: qla24xxhandleplogidoneevent+0x55f/0x570 [qla2xxx] kernel: qla2x00asyncloginspdone+0xd2/0x100 [qla2xxx] kernel: qla24xxlogioentry+0x13a/0x3c0 [qla2xxx] kernel: qla24xxprocessresponsequeue+0x306/0x400 [qla2xxx] kernel: qla24xxmsixrspq+0x3f/0xb0 [qla2xxx] kernel: _handleirqeventpercpu+0x40/0x180 kernel: handleirqeventpercpu+0x30/0x80 kernel: handleirq_event+0x36/0x60
- References
-
- https://git.kernel.org/stable/c/78225d6a2a4ffdb2250ce2b7691a9e68a3f86912
- https://git.kernel.org/stable/c/78612f2fe8e26637476d756a44f0f05cca0d97de
- https://git.kernel.org/stable/c/7fef50214dd04427233a2e66cd624d468e67aecb
- https://git.kernel.org/stable/c/826a9d4a00d1424afa961504aec6298ee92d5053
- https://git.kernel.org/stable/c/afd438ff874ca40b74321b3fa19bd61adfd7ca0c
- https://security-tracker.debian.org/tracker/CVE-2022-49156
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.10.113-1
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source