From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 04F141AB367 for ; Thu, 20 Jun 2024 11:17:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718882255; cv=none; b=piKANrxgc8FnKakmnc4zBbVNZPL5ynsGERACJ+luQ4qFY0GX86zHJLO3MbXgWI3IHfnBb4lOPq+o2ogZx5+S1sPk7XiyIUOlUIRWQXc86c1SQ0c7lQ4dyLyxlIEgmE+Dy46M3unh3iuGkqfUjDrIlDaZuYGubnphSM5PCPQvNlM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718882255; c=relaxed/simple; bh=hskyT5+RpR+h2PzuXSt4ic6/QFseXRRxSW9ovej+2SY=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=tDAkXLV9hRt7Ie9Z+05+iqbRcL0JqCZ/6kiolCF1qt5/JAdgOnUjFVUZb2LF5p0HzJZPXN82D+u2B1s0VQaKsbEJBNbP8LiHap49SO2NOVS397sUNxjAhYJRzlcWT+Nuj0a+ldxXDQUFoQNxK7OeUuDjmC6JKeQDV/gK2NNyWGs= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=eqodVkqr; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="eqodVkqr" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 7FAE7C2BD10; Thu, 20 Jun 2024 11:17:34 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1718882254; bh=hskyT5+RpR+h2PzuXSt4ic6/QFseXRRxSW9ovej+2SY=; h=From:To:Cc:Subject:Date:Reply-to:From; b=eqodVkqrG4720bjRiamh/ucv4HhIiPDOWvtCYy4l8MK5ijp21wf8aBxortpqBfRpH VZoQonlbZ8Hiua0c9pdiJQtsPeZp+jMRA4VSXlnyl+Oxmetko2cRoJcEL0NSo7Z4x9 W89vmKOUdUKRdtOgAXmKn+dC7OjQmsvByRdSzUzI= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-48745: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Date: Thu, 20 Jun 2024 13:16:25 +0200 Message-ID: <2024062004-CVE-2022-48745-7f0a@gregkh> X-Mailer: git-send-email 2.45.2 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2600; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=hskyT5+RpR+h2PzuXSt4ic6/QFseXRRxSW9ovej+2SY=; b=owGbwMvMwCRo6H6F97bub03G02pJDGkl/CVvNjZYTNt2/KDZNbabf+KVL3K9NhZ8ds6j9LP4r 3nfxZI5OmJZGASZGGTFFFm+bOM5ur/ikKKXoe1pmDmsTCBDGLg4BWAiPrcY5vAZH5s144ff5y9T 6ta5rOPi23nrFgPD/PDE84IqUslz1/cE+50Sm1bNd37bBAA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Substitute del_timer() with del_timer_sync() in fw reset polling deactivation flow, in order to prevent a race condition which occurs when del_timer() is called and timer is deactivated while another process is handling the timer interrupt. A situation that led to the following call trace: RIP: 0010:run_timer_softirq+0x137/0x420 recalibrate_cpu_khz+0x10/0x10 ktime_get+0x3e/0xa0 ? sched_clock_cpu+0xb/0xc0 __do_softirq+0xf5/0x2ea irq_exit_rcu+0xc1/0xf0 sysvec_apic_timer_interrupt+0x9e/0xc0 asm_sysvec_apic_timer_interrupt+0x12/0x20 The Linux kernel CVE team has assigned CVE-2022-48745 to this issue. Affected and fixed versions =========================== Issue introduced in 5.10 with commit 38b9f903f22b and fixed in 5.10.97 with commit 502c37b033fa Issue introduced in 5.10 with commit 38b9f903f22b and fixed in 5.15.20 with commit f895ebeb44d0 Issue introduced in 5.10 with commit 38b9f903f22b and fixed in 5.16.6 with commit 2a038dd1d942 Issue introduced in 5.10 with commit 38b9f903f22b and fixed in 5.17 with commit 3c5193a87b0f Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-48745 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/502c37b033fab7cde3e95a570af4f073306be45e https://git.kernel.org/stable/c/f895ebeb44d09d02674cfdd0cfc2bf687603918c https://git.kernel.org/stable/c/2a038dd1d942f8fbc495c58fa592ff24af05f1c2 https://git.kernel.org/stable/c/3c5193a87b0fea090aa3f769d020337662d87b5e