PT-2025-8363

CVE-2022-49429

·

Published

2022-05-24

·

Updated

2025-05-09

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A issue in the Linux kernel has been identified where the hfi1 module, when loaded with HFI1 CAP SDMA off, can cause a panic due to a NULL pointer dereference in the hfi1 write iter() function. This occurs through a sequence of function calls including sdma select user engine, hfi1 user sdma process request, and ultimately hfi1 write iter. The problem arises when the SDMA is disabled, leading to the panic.
Recommendations To resolve this issue, test for SDMA in the hfi1 write iter() function and fail the I/O with EINVAL when SDMA is disabled.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
CESA-2023_2951
OESA-2025-1465
RHSA-2023:2458
RHSA-2023_2458
RHSA-2023:2951
RHSA-2023_2951
SUSE-SU-2025:1027-1
SUSE-SU-2025_1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1
SUSE-SU-2025:1293-1
SUSE-SU-2025_1293-1
Found an issue in the description? Have something to add? Feel free to write us 👾