Huawei EulerOS: CVE-2022-48788: kernel security update

Huawei EulerOS: CVE-2022-48788: kernel security update

Severity

7

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

07/16/2024

Created

01/23/2025

Added

01/21/2025

Modified

01/28/2025

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work While nvme_rdma_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state.

Solution(s)

• huawei-euleros-2_0_sp8-upgrade-bpftool
• huawei-euleros-2_0_sp8-upgrade-kernel
• huawei-euleros-2_0_sp8-upgrade-kernel-devel
• huawei-euleros-2_0_sp8-upgrade-kernel-headers
• huawei-euleros-2_0_sp8-upgrade-kernel-tools
• huawei-euleros-2_0_sp8-upgrade-kernel-tools-libs
• huawei-euleros-2_0_sp8-upgrade-perf
• huawei-euleros-2_0_sp8-upgrade-python-perf
• huawei-euleros-2_0_sp8-upgrade-python3-perf

References

• https://attackerkb.com/topics/cve-2022-48788
• CVE - 2022-48788
• EulerOS-SA-2025-1123