CVE-2022-49983

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

udmabuf: Set the DMA mask for the udmabuf device (v2)

If the DMA mask is not set explicitly, the following warning occurs

when the userspace tries to access the dma-buf via the CPU as

reported by syzbot here:

WARNING: CPU: 1 PID: 3595 at kernel/dma/mapping.c:188

__dma_map_sg_attrs+0x181/0x1f0 kernel/dma/mapping.c:188

Modules linked in:

CPU: 0 PID: 3595 Comm: syz-executor249 Not tainted

5.17.0-rc2-syzkaller-00316-g0457e5153e0e #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS

Google 01/01/2011

RIP: 0010:__dma_map_sg_attrs+0x181/0x1f0 kernel/dma/mapping.c:188

Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 71 4c 8b 3d c0

83 b5 0d e9 db fe ff ff e8 b6 0f 13 00 0f 0b e8 af 0f 13 00 <0f> 0b 45

31 e4 e9 54 ff ff ff e8 a0 0f 13 00 49 8d 7f 50 48 b8 00

RSP: 0018:ffffc90002a07d68 EFLAGS: 00010293

RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000

RDX: ffff88807e25e2c0 RSI:

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References