CVE-2022-49297

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc3-next-20220422-00003-g2176915513ca

Description A vulnerability in the Linux kernel has been identified, which can cause an io hung when disconnecting a device. This issue is triggered by "qemu-nbd" and can lead to a blocked task. The problem arises from the inability to clear requests after a commit, resulting in requests not being completed due to a timeout. The issue is related to the nbd clear sock ioctl() function and the NBD CMD INFLIGHT flag.

Recommendations For Linux kernel versions prior to 5.18.0-rc3-next-20220422-00003-g2176915513ca, switch back to calling nbd clear sock() in nbd clear sock ioctl() to allow inflight requests to be cleared.