CVE-2022-48930

Aug. 23, 2024, 1:51 a.m.

5.5
Medium

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushing system_long_wq is deadlock-prone and since that call is redundant with a preceding cancel_work_sync()

Product(s) Impacted

Vendor Product Versions
Linux
  • Linux Kernel
  • *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-667
Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /

References

https://git.kernel.org/stable/c/081bdc9fe05bb23248f5effb6f811da3da4b8252
https://git.kernel.org/stable/c/4752fafb461821f8c8581090c923ababba68c5bd
https://git.kernel.org/stable/c/8cc342508f9e7fdccd2e9758ae9d52aff72dab7f
https://git.kernel.org/stable/c/901206f71e6ad2b2e7accefc5199a438d173c25f
https://git.kernel.org/stable/c/98d056603ce55ceb90631b3927151c190dfb1b27
https://git.kernel.org/stable/c/99eb8d694174c777558dc902d575d1997d5ca650
https://git.kernel.org/stable/c/c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4
https://git.kernel.org/stable/c/d7997d19dfa7001ca41e971cd9efd091bb195b51

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-08-22
CVE-2022-48930
CWE-667

CVSS Score

5.5 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: HIGH

    • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

    View Vector String

Timeline

Published: Aug. 22, 2024, 4:15 a.m.
Last Modified: Aug. 23, 2024, 1:51 a.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.