CVE-2022-50475

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Make sure "ib_port" is valid when access sysfs node

The "ib_port" structure must be set before adding the sysfs kobject,

and reset after removing it, otherwise it may crash when accessing

the sysfs node:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050

Mem abort info:

ESR = 0x96000006

Exception class = DABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

Data abort info:

ISV = 0, ISS = 0x00000006

CM = 0, WnR = 0

user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000e85f5ba5

[0000000000000050] pgd=0000000848fd9003, pud=000000085b387003, pmd=0000000000000000

Internal error: Oops: 96000006 [#2] PREEMPT SMP

Modules linked in: ib_umad(O) mlx5_ib(O) nfnetlink_cttimeout(E) nfnetlink(E) act_gact(E) cls_flower(E) sch_ingress(E) openvswitch(E) nsh(E) nf_nat_ipv6(E) nf_nat_ipv4(E) nf_conncount(E) nf_nat(E) nf_conntrack(E) nf_defrag_i

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References