CVE-2022-49065

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19

Description A NULL dereference crash occurs in the Linux kernel when an svc rqst is deferred while the sunrpc tracing subsystem is enabled. This happens because svc revisit() sets dr->xprt to NULL, which cannot be relied upon in the tracepoint to provide the remote's address. The issue is related to the svc deferred event trace class in the SUNRPC subsystem.

Recommendations For Linux kernel versions prior to 5.19, consider applying the fix that converts the dr::addr field into a presentation address in the TP fast assign() arm of the trace event, and store that as a string, as a temporary workaround until a patch is available.