CVE-2022-50053

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix reset error handling

Do not call iavf_close in iavf_reset_task error handling. Doing so can

lead to double call of napi_disable, which can lead to deadlock there.

Removing VF would lead to iavf_remove task being stuck, because it

requires crit_lock, which is held by iavf_close.

Call iavf_disable_vf if reset fail, so that driver will clean up

remaining invalid resources.

During rapid VF resets, HW can fail to setup VF mailbox. Wrong

error handling can lead to iavf_remove being stuck with:

[ 5218.999087] iavf 0000:82:01.0: Failed to init adminq: -53

...

[ 5267.189211] INFO: task repro.sh:11219 blocked for more than 30 seconds.

[ 5267.189520] Tainted: G S E 5.18.0-04958-ga54ce3703613-dirty #1

[ 5267.189764] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

[ 5267.190062] task:repro.sh state:D stack: 0 pid:11219 ppid: 8162 flags:0x00000000

[ 5267.190347] Cal

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References