CVE-2022-49018

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix sleep in atomic at close time

Matt reported a splat at msk close time:

BUG: sleeping function called from invalid context at net/mptcp/protocol.c:2877

in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 155, name: packetdrill

preempt_count: 201, expected: 0

RCU nest depth: 0, expected: 0

4 locks held by packetdrill/155:

#0: ffff888001536990 (&sb->s_type->i_mutex_key#6){+.+.}-{3:3}, at: __sock_release (net/socket.c:650)

#1: ffff88800b498130 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close (net/mptcp/protocol.c:2973)

#2: ffff88800b49a130 (sk_lock-AF_INET/1){+.+.}-{0:0}, at: __mptcp_close_ssk (net/mptcp/protocol.c:2363)

#3: ffff88800b49a0b0 (slock-AF_INET){+...}-{2:2}, at: __lock_sock_fast (include/net/sock.h:1820)

Preemption disabled at:

0x0

CPU: 1 PID: 155 Comm: packetdrill Not tainted 6.1.0-rc5 #365

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References