CVE-2022-49536

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock issue in the Linux kernel's SCSI I/O completion and abort handler has been identified. This issue occurs during stress I/O tests with 500+ vports, resulting in hard LOCKUP call traces. The problem arises from the incorrect ordering of lock acquisition in the lpfc abort handler routine, specifically with lpfc cmd->buf lock and phba->hbalock. This can lead to a deadlock situation between two CPUs.

Recommendations To resolve this issue, the lpfc abort handler routine should be modified to take the lpfc cmd->buf lock before phba->hbalock. This reordering prevents the deadlock situation from occurring. At the moment, there is no information about a newer version that contains a fix for this vulnerability.