CVE-2022-49215

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

xsk: Fix race at socket teardown

Fix a race in the xsk socket teardown code that can lead to a NULL pointer

dereference splat. The current xsk unbind code in xsk_unbind_dev() starts by

setting xs->state to XSK_UNBOUND, sets xs->dev to NULL and then waits for any

NAPI processing to terminate using synchronize_net(). After that, the release

code starts to tear down the socket state and free allocated memory.

BUG: kernel NULL pointer dereference, address: 00000000000000c0

PGD 8000000932469067 P4D 8000000932469067 PUD 0

Oops: 0000 [#1] PREEMPT SMP PTI

CPU: 25 PID: 69132 Comm: grpcpp_sync_ser Tainted: G I 5.16.0+ #2

Hardware name: Dell Inc. PowerEdge R730/0599V5, BIOS 1.2.10 03/09/2015

RIP: 0010:__xsk_sendmsg+0x2c/0x690

[...]

RSP: 0018:ffffa2348bd13d50 EFLAGS: 00010246

RAX: 0000000000000000 RBX: 0000000000000040 RCX: ffff8d5fc632d258

RDX: 0000000000400000 RSI: ffffa2348bd13e10 RDI: ffff

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References