{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2022-48715", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-06-20T11:09:39.050Z", "datePublished": "2024-06-20T11:13:08.654Z", "dateUpdated": "2024-09-11T17:34:49.952Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-06-20T11:13:57.024Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bnx2fc: Make bnx2fc_recv_frame() mp safe\n\nRunning tests with a debug kernel shows that bnx2fc_recv_frame() is\nmodifying the per_cpu lport stats counters in a non-mpsafe way. Just boot\na debug kernel and run the bnx2fc driver with the hardware enabled.\n\n[ 1391.699147] BUG: using smp_processor_id() in preemptible [00000000] code: bnx2fc_\n[ 1391.699160] caller is bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc]\n[ 1391.699174] CPU: 2 PID: 4355 Comm: bnx2fc_l2_threa Kdump: loaded Tainted: G B\n[ 1391.699180] Hardware name: HP ProLiant DL120 G7, BIOS J01 07/01/2013\n[ 1391.699183] Call Trace:\n[ 1391.699188] dump_stack_lvl+0x57/0x7d\n[ 1391.699198] check_preemption_disabled+0xc8/0xd0\n[ 1391.699205] bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc]\n[ 1391.699215] ? do_raw_spin_trylock+0xb5/0x180\n[ 1391.699221] ? bnx2fc_npiv_create_vports.isra.0+0x4e0/0x4e0 [bnx2fc]\n[ 1391.699229] ? bnx2fc_l2_rcv_thread+0xb7/0x3a0 [bnx2fc]\n[ 1391.699240] bnx2fc_l2_rcv_thread+0x1af/0x3a0 [bnx2fc]\n[ 1391.699250] ? bnx2fc_ulp_init+0xc0/0xc0 [bnx2fc]\n[ 1391.699258] kthread+0x364/0x420\n[ 1391.699263] ? _raw_spin_unlock_irq+0x24/0x50\n[ 1391.699268] ? set_kthread_struct+0x100/0x100\n[ 1391.699273] ret_from_fork+0x22/0x30\n\nRestore the old get_cpu/put_cpu code with some modifications to reduce the\nsize of the critical section." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/scsi/bnx2fc/bnx2fc_fcoe.c" ], "versions": [ { "version": "d576a5e80cd0", "lessThan": "3a345198a7c2", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "471085571f92", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "003bcee66a8f", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "53e4f71763c6", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "ec4334152dae", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "2f5a1ac68bdf", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "2d24336c7214", "status": "affected", "versionType": "git" }, { "version": "d576a5e80cd0", "lessThan": "936bd03405fc", "status": "affected", "versionType": "git" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/scsi/bnx2fc/bnx2fc_fcoe.c" ], "versions": [ { "version": "3.16", "status": "affected" }, { "version": "0", "lessThan": "3.16", "status": "unaffected", "versionType": "custom" }, { "version": "4.9.300", "lessThanOrEqual": "4.9.*", "status": "unaffected", "versionType": "custom" }, { "version": "4.14.265", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom" }, { "version": "4.19.228", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.4.178", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.10.99", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.15.22", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.16.8", "lessThanOrEqual": "5.16.*", "status": "unaffected", "versionType": "custom" }, { "version": "5.17", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/3a345198a7c2d1db2526dc60b77052f75de019d3" }, { "url": "https://git.kernel.org/stable/c/471085571f926a1fe6b1bed095638994dbf23990" }, { "url": "https://git.kernel.org/stable/c/003bcee66a8f0e76157eb3af369c173151901d97" }, { "url": "https://git.kernel.org/stable/c/53e4f71763c61a557283eb43301efd671922d1e8" }, { "url": "https://git.kernel.org/stable/c/ec4334152dae175dbd8fd5bde1d2139bbe7b42d0" }, { "url": "https://git.kernel.org/stable/c/2f5a1ac68bdf2899ce822ab845081922ea8c588e" }, { "url": "https://git.kernel.org/stable/c/2d24336c7214b281b51860e54783dfc65f1248df" }, { "url": "https://git.kernel.org/stable/c/936bd03405fc83ba039d42bc93ffd4b88418f1d3" } ], "title": "scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe", "x_generator": { "engine": "bippy-7d53e8ef8be4" } }, "adp": [ { "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.856Z" }, "title": "CVE Program Container", "references": [ { "url": "https://git.kernel.org/stable/c/3a345198a7c2d1db2526dc60b77052f75de019d3", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/471085571f926a1fe6b1bed095638994dbf23990", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/003bcee66a8f0e76157eb3af369c173151901d97", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/53e4f71763c61a557283eb43301efd671922d1e8", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/ec4334152dae175dbd8fd5bde1d2139bbe7b42d0", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/2f5a1ac68bdf2899ce822ab845081922ea8c588e", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/2d24336c7214b281b51860e54783dfc65f1248df", "tags": [ "x_transferred" ] }, { "url": "https://git.kernel.org/stable/c/936bd03405fc83ba039d42bc93ffd4b88418f1d3", "tags": [ "x_transferred" ] } ] }, { "metrics": [ { "other": { "type": "ssvc", "content": { "id": "CVE-2022-48715", "role": "CISA Coordinator", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "version": "2.0.3", "timestamp": "2024-09-10T17:11:26.064994Z" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:34:49.952Z" } } ] } }