CVE-2022-48825

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Add stag_work to all the vports

Call trace seen when creating NPIV ports, only 32 out of 64 show online.

stag work was not initialized for vport, hence initialize the stag work.

WARNING: CPU: 8 PID: 645 at kernel/workqueue.c:1635 __queue_delayed_work+0x68/0x80

CPU: 8 PID: 645 Comm: kworker/8:1 Kdump: loaded Tainted: G IOE --------- --

4.18.0-348.el8.x86_64 #1

Hardware name: Dell Inc. PowerEdge MX740c/0177V9, BIOS 2.12.2 07/09/2021

Workqueue: events fc_lport_timeout [libfc]

RIP: 0010:__queue_delayed_work+0x68/0x80

Code: 89 b2 88 00 00 00 44 89 82 90 00 00 00 48 01 c8 48 89 42 50 41 81

f8 00 20 00 00 75 1d e9 60 24 07 00 44 89 c7 e9 98 f6 ff ff <0f> 0b eb

c5 0f 0b eb a1 0f 0b eb a7 0f 0b eb ac 44 89 c6 e9 40 23

RSP: 0018:ffffae514bc3be40 EFLAGS: 00010006

RAX: ffff8d25d6143750 RBX: 0000000000000202 RCX: 0000000000000002

RDX: ffff8d2e31383748 RSI: ffff8d25c000d600 RDI: ffff8d2e31383788

RBP: ffff8d2e31380

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References