CVE-2022-48811

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ibmvnic: don't release napi in __ibmvnic_open()

If __ibmvnic_open() encounters an error such as when setting link state,

it calls release_resources() which frees the napi structures needlessly.

Instead, have __ibmvnic_open() only clean up the work it did so far (i.e.

disable napi and irqs) and leave the rest to the callers.

If caller of __ibmvnic_open() is ibmvnic_open(), it should release the

resources immediately. If the caller is do_reset() or do_hard_reset(),

they will release the resources on the next reset.

This fixes following crash that occurred when running the drmgr command

several times to add/remove a vnic interface:

[102056] ibmvnic 30000003 env3: Disabling rx_scrq[6] irq

[102056] ibmvnic 30000003 env3: Disabling rx_scrq[7] irq

[102056] ibmvnic 30000003 env3: Replenished 8 pools

Kernel attempted to read user page (10) - exploit attempt? (uid: 0)

BUG: Kernel NULL pointer dereference on read at 0x0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References