s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
Published Apr 28, 2024
7.8
HIGHCVSS 3.1
EPSS 0.24%
Description
Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup pointer being NULL.
The pavgroup pointer is checked on the entrance of the function but without the lcu->lock being held. Therefore there is a race window between dasd_alias_get_start_dev() and _lcu_update() which sets pavgroup to NULL with the lcu->lock held.
Fix by checking the pavgroup pointer with lcu->lock held.
Affected products
-
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version StatusaffectedConstraints
- Version
-
- Version 2.6.25StatusaffectedConstraints-
- Version 0StatusunaffectedConstraints<2.6.25
- Version 4.14.295StatusunaffectedConstraints<=4.14.*
- Version 4.19.260StatusunaffectedConstraints<=4.19.*
- Version 4.9.330StatusunaffectedConstraints<=4.9.*
- Version 5.10.146StatusunaffectedConstraints<=5.10.*
- Version 5.15.71StatusunaffectedConstraints<=5.15.*
- Version 5.19.12StatusunaffectedConstraints<=5.19.*
- Version 5.4.215StatusunaffectedConstraints<=5.4.*
- Version 6.0StatusunaffectedConstraints<=*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
| |||||||||||||||||||||||||||||||||
| Linux | Linux | affected |
|
- ≥ 2.6.25 · < 4.9.330
- ≥ 4.10 · < 4.14.295
- ≥ 4.15 · < 4.19.260
- ≥ 4.20 · < 5.4.215
- ≥ 5.5 · < 5.10.146
- ≥ 5.11 · < 5.15.71
- ≥ 5.16 · < 5.19.12
- 6.0
- 6.0
- 6.0
- 6.0
- 6.0
- 6.0
No data.
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
No Red Hat products are affected by this vulnerability.
References (13)
- https://access.redhat.com/security/cve/CVE-2022-48636 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2277833 Issue Tracking
- https://git.kernel.org/stable/c/2e473351400e3dd66f0b71eddcef82ee45a584c1 Patch
- https://git.kernel.org/stable/c/49f401a98b318761ca2e15d4c7869a20043fbed4 Patch
- https://git.kernel.org/stable/c/650a2e79d176db753654d3dde88e53a2033036ac Patch
- https://git.kernel.org/stable/c/aaba5ff2742043705bc4c02fd0b2b246e2e16da1 Patch
- https://git.kernel.org/stable/c/d3a67c21b18f33c79382084af556557c442f12a6 Patch
- https://git.kernel.org/stable/c/d86b4267834e6d4af62e3073e48166e349ab1b70 Patch
- https://git.kernel.org/stable/c/db7ba07108a48c0f95b74fabbfd5d63e924f992d Patch
- https://git.kernel.org/stable/c/f5fcc9d6d71d9ff7fdbdd4b89074e6e24fffc20b Patch
- https://lore.kernel.org/linux-cve-announce/2024042855-CVE-2022-48636-52a7@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2022-48636
- https://www.cve.org/CVERecord?id=CVE-2022-48636
Change history (0)
No recorded changes yet.