CVE-2022-48825— scsi: qedf: Add stag_work to all the vports
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-48825
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
scsi: qedf: Add stag_work to all the vports
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add stag_work to all the vports Call trace seen when creating NPIV ports, only 32 out of 64 show online. stag work was not initialized for vport, hence initialize the stag work. WARNING: CPU: 8 PID: 645 at kernel/workqueue.c:1635 __queue_delayed_work+0x68/0x80 CPU: 8 PID: 645 Comm: kworker/8:1 Kdump: loaded Tainted: G IOE --------- -- 4.18.0-348.el8.x86_64 #1 Hardware name: Dell Inc. PowerEdge MX740c/0177V9, BIOS 2.12.2 07/09/2021 Workqueue: events fc_lport_timeout [libfc] RIP: 0010:__queue_delayed_work+0x68/0x80 Code: 89 b2 88 00 00 00 44 89 82 90 00 00 00 48 01 c8 48 89 42 50 41 81 f8 00 20 00 00 75 1d e9 60 24 07 00 44 89 c7 e9 98 f6 ff ff <0f> 0b eb c5 0f 0b eb a1 0f 0b eb a7 0f 0b eb ac 44 89 c6 e9 40 23 RSP: 0018:ffffae514bc3be40 EFLAGS: 00010006 RAX: ffff8d25d6143750 RBX: 0000000000000202 RCX: 0000000000000002 RDX: ffff8d2e31383748 RSI: ffff8d25c000d600 RDI: ffff8d2e31383788 RBP: ffff8d2e31380de0 R08: 0000000000002000 R09: ffff8d2e31383750 R10: ffffffffc0c957e0 R11: ffff8d2624800000 R12: ffff8d2e31380a58 R13: ffff8d2d915eb000 R14: ffff8d25c499b5c0 R15: ffff8d2e31380e18 FS: 0000000000000000(0000) GS:ffff8d2d1fb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055fd0484b8b8 CR3: 00000008ffc10006 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: queue_delayed_work_on+0x36/0x40 qedf_elsct_send+0x57/0x60 [qedf] fc_lport_enter_flogi+0x90/0xc0 [libfc] fc_lport_timeout+0xb7/0x140 [libfc] process_one_work+0x1a7/0x360 ? create_worker+0x1a0/0x1a0 worker_thread+0x30/0x390 ? create_worker+0x1a0/0x1a0 kthread+0x116/0x130 ? kthread_flush_work_fn+0x10/0x10 ret_from_fork+0x35/0x40 ---[ end trace 008f00f722f2c2ff ]-- Initialize stag work for all the vports.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于scsi:qedf模块在创建NPIV端口时，stag_work没有初始化，导致只有部分端口上线。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-48825
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-48825
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-07-16 · 98 CVEs total
| CVE-2022-48832 | audit: don't deref the syscall args when checking the openat2 open_how::flags | |
| CVE-2022-48826 | drm/vc4: Fix deadlock on DSI device attach error | |
| CVE-2022-48821 | misc: fastrpc: avoid double fput() on failed usercopy | |
| CVE-2022-48819 | tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case | |
| CVE-2022-48820 | phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() | |
| CVE-2022-48818 | net: dsa: mv88e6xxx: don't use devres for mdiobus | |
| CVE-2022-48817 | net: dsa: ar9331: register the mdiobus under devres | |
| CVE-2022-48822 | usb: f_fs: Fix use-after-free for epfile | |
| CVE-2022-48830 | can: isotp: fix potential CAN frame reception race in isotp_rcv() | |
| CVE-2022-48831 | ima: fix reference leak in asymmetric_verify() | |
| CVE-2022-48828 | NFSD: Fix ia_size underflow | |
| CVE-2022-48834 | usb: usbtmc: Fix bug in pipe direction for control transfers | |
| CVE-2022-48833 | btrfs: skip reserved bytes warning on unmount after log cleanup failure | |
| CVE-2022-48835 | scsi: mpt3sas: Page fault in reply q processing | |
| CVE-2022-48837 | usb: gadget: rndis: prevent integer overflow in rndis_set_response() | |
| CVE-2022-48836 | Input: aiptek - properly check endpoint type | |
| CVE-2022-48838 | usb: gadget: Fix use-after-free bug by not setting udc->dev.driver | |
| CVE-2022-48839 | net/packet: fix slab-out-of-bounds access in packet_recvmsg() | |
| CVE-2022-48840 | iavf: Fix hang during reboot/shutdown | |
| CVE-2022-48842 | ice: Fix race condition during interface enslave |
Showing top 20 of 98 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2022-48825
No comments yet