CVE-2022-49536

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49536
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49536.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49536
Downstream
Related
Published
2025-02-26T02:13:54.014Z
Modified
2026-03-20T12:24:37.919789Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock

During stress I/O tests with 500+ vports, hard LOCKUP call traces are observed.

CPU A: nativequeuedspinlockslowpath+0x192 rawspinlockirqsave+0x32 lpfchandlefcperr+0x4c6 lpfcfcpiocmdwqecmpl+0x964 lpfcsli4fphandlecqe+0x266 __lpfcsli4process_cq+0x105 __lpfcsli4hba_processcq+0x3c lpfccqpollhdler+0x16 irqpollsoftirq+0x76 __softirqentrytextstart+0xe4 irqexit+0xf7 doIRQ+0x7f

CPU B: nativequeuedspinlockslowpath+0x5b rawspinlock+0x1c lpfcaborthandler+0x13e scmdehaborthandler+0x85 processonework+0x1a7 workerthread+0x30 kthread+0x112 retfrom_fork+0x1f

Diagram of lockup:

CPUA CPUB ---- ---- lpfccmd->buflock phba->hbalock lpfccmd->buflock phba->hbalock

Fix by reordering the taking of the lpfccmd->buflock and phba->hbalock in lpfcaborthandler routine so that it tries to take the lpfccmd->buflock first before phba->hbalock.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49536.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c2017260eea2db62e7bb1b7cbb1759f1d11ed067
Fixed
7625e81de2164a082810e1f27547d388406da610
Fixed
21c0d469349957b5dc811c41200a2a998996ca8d
Fixed
0c4eed901285b9cae36a622f32bea3e92490da6c
Fixed
03cbbd7c2f5ee288f648f4aeedc765a181188553

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49536.json"