Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-49321: Linux kernel NFS client may crash on bad RDMA reply
CVE-2022-49321 · published 1 year ago
Summary
The Linux kernel's NFS version 3 client can encounter a serious error when it receives an unexpected response from an RDMA server that lacks a required service. This can cause the system to stop working due to a null pointer crash. Updating the kernel to the latest version that includes the fix prevents the crash.
What to do
- Update canonical linux to version 5.15.0-48.54.
- Update linux kernel to version 5.18.4.
- Update canonical linux-azure to version 4.15.0-1150.165~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1140.151~16.04.1.
- Update canonical linux-azure to version 4.15.0-1150.165~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1135.151~16.04.2.
- Update canonical linux-hwe to version 4.15.0-192.203~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1105.116~16.04.1.
- Update canonical linux to version 4.15.0-192.203.
- Update canonical linux-aws to version 4.15.0-1140.151.
- Update canonical linux-aws-5.4 to version 5.4.0-1085.92~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1150.165.
- Update canonical linux-azure-5.4 to version 5.4.0-1091.96~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1135.151.
- Update canonical linux-gcp-5.4 to version 5.4.0-1089.97~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-126.142~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1033.37~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1126.131.
- Update canonical linux-oracle to version 4.15.0-1105.116.
- Update canonical linux-oracle-5.4 to version 5.4.0-1083.91~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1070.80~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2079.84.
- Update canonical linux-azure-fips to version 4.15.0-2060.66.
- Update canonical linux-fips to version 4.15.0-1097.108.
- Update canonical linux-gcp-fips to version 4.15.0-2044.49.
- Update canonical linux to version 5.4.0-126.142.
- Update canonical linux-aws to version 5.4.0-1085.92.
- Update canonical linux-aws-5.15 to version 5.15.0-1020.24~20.04.1.
- Update canonical linux-azure to version 5.4.0-1091.96.
- Update canonical linux-azure-5.15 to version 5.15.0-1020.25~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1046.51.
- Update canonical linux-gcp to version 5.4.0-1089.97.
- Update canonical linux-gcp-5.15 to version 5.15.0-1018.24~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-48.54~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1033.37.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1016.21~20.04.1.
- Update canonical linux-iot to version 5.4.0-1004.6.
- Update canonical linux-kvm to version 5.4.0-1075.80.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-48.54~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1083.91.
- Update canonical linux-oracle-5.15 to version 5.15.0-1018.23~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1070.80.
- Update canonical linux-riscv-5.15 to version 5.15.0-1019.22~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1085.92+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1091.96+fips1.
- Update canonical linux-fips to version 5.4.0-1061.69.
- Update canonical linux-gcp-fips to version 5.4.0-1089.97+fips1.
- Update canonical linux-aws to version 5.15.0-1020.24.
- Update canonical linux-azure to version 5.15.0-1020.25.
- Update canonical linux-gcp to version 5.15.0-1018.24.
- Update canonical linux-gke to version 5.15.0-1016.19.
- Update canonical linux-gkeop to version 5.15.0-1003.5.
- Update canonical linux-ibm to version 5.15.0-1015.17.
- Update canonical linux-intel-iotg to version 5.15.0-1016.21.
- Update canonical linux-kvm to version 5.15.0-1018.22.
- Update canonical linux-lowlatency to version 5.15.0-48.54.
- Update canonical linux-nvidia to version 5.15.0-1007.7.
- Update canonical linux-oracle to version 5.15.0-1018.23.
- Update canonical linux-raspi to version 5.15.0-1015.17.
- Update canonical linux-realtime to version 5.15.0-1021.21.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1024.30.1.
- Update debian linux to version 5.18.5-1.
- Update linux linux to version 8e3943c50764dc7c5f25911970c3ff062ec1f18c or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
< 4.14.283 >= 4.15, < 4.19.247 >= 4.20, < 5.4.198 >= 5.5, < 5.10.122 >= 5.11, < 5.15.47 >= 5.16, < 5.17.15 >= 5.18, < 5.18.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-48.54 Fix: upgrade to 5.15.0-48.54
|
| – | linux | linux |
< 8e3943c50764dc7c5f25911970c3ff062ec1f18c 4.4 |
| Linux | linux | kernel |
>= 5.18.0, < 5.18.4 Fix: upgrade to 5.18.4
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1150.165~14.04.1 Fix: upgrade to 4.15.0-1150.165~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1140.151~16.04.1 Fix: upgrade to 4.15.0-1140.151~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1150.165~16.04.1 Fix: upgrade to 4.15.0-1150.165~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1135.151~16.04.2 Fix: upgrade to 4.15.0-1135.151~16.04.2
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-192.203~16.04.1 Fix: upgrade to 4.15.0-192.203~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1105.116~16.04.1 Fix: upgrade to 4.15.0-1105.116~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-192.203 Fix: upgrade to 4.15.0-192.203
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1140.151 Fix: upgrade to 4.15.0-1140.151
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1085.92~18.04.1 Fix: upgrade to 5.4.0-1085.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1150.165 Fix: upgrade to 4.15.0-1150.165
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1091.96~18.04.1 Fix: upgrade to 5.4.0-1091.96~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1135.151 Fix: upgrade to 4.15.0-1135.151
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1089.97~18.04.1 Fix: upgrade to 5.4.0-1089.97~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-126.142~18.04.1 Fix: upgrade to 5.4.0-126.142~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1033.37~18.04.1 Fix: upgrade to 5.4.0-1033.37~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1126.131 Fix: upgrade to 4.15.0-1126.131
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1105.116 Fix: upgrade to 4.15.0-1105.116
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1083.91~18.04.1 Fix: upgrade to 5.4.0-1083.91~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1070.80~18.04.1 Fix: upgrade to 5.4.0-1070.80~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2079.84 Fix: upgrade to 4.15.0-2079.84
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2060.66 Fix: upgrade to 4.15.0-2060.66
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1097.108 Fix: upgrade to 4.15.0-1097.108
|
Showing 50 of 159. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2044.49 Fix: upgrade to 4.15.0-2044.49
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-126.142 Fix: upgrade to 5.4.0-126.142
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1085.92 Fix: upgrade to 5.4.0-1085.92
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1020.24~20.04.1 Fix: upgrade to 5.15.0-1020.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1091.96 Fix: upgrade to 5.4.0-1091.96
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1020.25~20.04.1 Fix: upgrade to 5.15.0-1020.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1046.51 Fix: upgrade to 5.4.0-1046.51
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1089.97 Fix: upgrade to 5.4.0-1089.97
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1018.24~20.04.1 Fix: upgrade to 5.15.0-1018.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-48.54~20.04.1 Fix: upgrade to 5.15.0-48.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1033.37 Fix: upgrade to 5.4.0-1033.37
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1016.21~20.04.1 Fix: upgrade to 5.15.0-1016.21~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1004.6 Fix: upgrade to 5.4.0-1004.6
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1075.80 Fix: upgrade to 5.4.0-1075.80
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-48.54~20.04.1 Fix: upgrade to 5.15.0-48.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1083.91 Fix: upgrade to 5.4.0-1083.91
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1018.23~20.04.1 Fix: upgrade to 5.15.0-1018.23~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1070.80 Fix: upgrade to 5.4.0-1070.80
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1019.22~20.04.1 Fix: upgrade to 5.15.0-1019.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1085.92+fips1 Fix: upgrade to 5.4.0-1085.92+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1091.96+fips1 Fix: upgrade to 5.4.0-1091.96+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1061.69 Fix: upgrade to 5.4.0-1061.69
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1089.97+fips1 Fix: upgrade to 5.4.0-1089.97+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1020.24 Fix: upgrade to 5.15.0-1020.24
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1020.25 Fix: upgrade to 5.15.0-1020.25
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1024.30.1 Fix: upgrade to 5.15.0-1024.30.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1018.24 Fix: upgrade to 5.15.0-1018.24
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1016.19 Fix: upgrade to 5.15.0-1016.19
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1003.5 Fix: upgrade to 5.15.0-1003.5
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1016.21 Fix: upgrade to 5.15.0-1016.21
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1018.22 Fix: upgrade to 5.15.0-1018.22
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-48.54 Fix: upgrade to 5.15.0-48.54
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1007.7 Fix: upgrade to 5.15.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1018.23 Fix: upgrade to 5.15.0-1018.23
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1021.21 Fix: upgrade to 5.15.0-1021.21
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 5.18.5-1 Fix: upgrade to 5.18.5-1
|
Original advisory text
xprtrdma: treat all calls not a bcall when bc_serv is NULL
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: treat all calls not a bcall when bc_serv is NULL When a rdma server returns a fault format reply, nfs v3 client may treats it as a bcall when bc service is not exist. The debug message at rpcrdma_bc_receive_call are, [56579.837169] RPC: rpcrdma_bc_receive_call: callback XID 00000001, length=20 [56579.837174] RPC: rpcrdma_bc_receive_call: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 After that, rpcrdma_bc_receive_call will meets NULL pointer as, [ 226.057890] BUG: unable to handle kernel NULL pointer dereference at 00000000000000c8 ... [ 226.058704] RIP: 0010:_raw_spin_lock+0xc/0x20 ... [ 226.059732] Call Trace: [ 226.059878] rpcrdma_bc_receive_call+0x138/0x327 [rpcrdma] [ 226.060011] __ib_process_cq+0x89/0x170 [ib_core] [ 226.060092] ib_cq_poll_work+0x26/0x80 [ib_core] [ 226.060257] process_one_work+0x1a7/0x360 [ 226.060367] ? create_worker+0x1a0/0x1a0 [ 226.060440] worker_thread+0x30/0x390 [ 226.060500] ? create_worker+0x1a0/0x1a0 [ 226.060574] kthread+0x116/0x130 [ 226.060661] ? kthread_flush_work_fn+0x10/0x10 [ 226.060724] ret_from_fork+0x35/0x40 ...
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49321... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49321 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2022-49321 Third Party Advisory
- https://git.kernel.org/stable/c/8dbae5affbdbf524b48000f9d357925bb001e5f4 Third Party Advisory
- https://git.kernel.org/stable/c/8e3943c50764dc7c5f25911970c3ff062ec1f18c Third Party Advisory
- https://git.kernel.org/stable/c/90c4f73104016748533a5707ecd15930fbeff402 Third Party Advisory
- https://git.kernel.org/stable/c/91784f3d77b73885e1b2e6b59d3cbf0de0a1126a Third Party Advisory
- https://git.kernel.org/stable/c/11270e7ca268e8d61b5d9e5c3a54bd1550642c9c Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49321 Third Party Advisory
- https://git.kernel.org/linus/11270e7ca268e8d61b5d9e5c3a54bd1550642c9c Third Party Advisory
- https://git.kernel.org/stable/c/998d35a2aff4b81a1c784f3aa45cd3afff6814c1 Third Party Advisory
- https://git.kernel.org/stable/c/a3fc8051ee061e31db13e2fe011e8e0b71a7f815 Third Party Advisory
- https://git.kernel.org/stable/c/da99331fa62131a38a0947a8204c5208de7b0454 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49321 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-476NULL Pointer Dereference
Timeline
Published26 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49321 · OSV
UBUNTU-CVE-2022-49321 · OSV
CVE-2022-49321 · NVD
CVE-2022-49321 · MITRE
DEBIAN-CVE-2022-49321 · OSV
Track software like this
Free during beta