CVE-2022-49429

RDMA/hfi1: Prevent panic when SDMA is disabled

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hfi1: Prevent panic when SDMA is disabled

If the hfi1 module is loaded with HFI1_CAP_SDMA off, a call to hfi1_write_iter() will dereference a NULL pointer and panic. A typical stack frame is:

sdma_select_user_engine [hfi1] hfi1_user_sdma_process_request [hfi1] hfi1_write_iter [hfi1] do_iter_readv_writev do_iter_write vfs_writev do_writev do_syscall_64

The fix is to test for SDMA in hfi1_write_iter() and fail the I/O with EINVAL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 33794e8e9bcb4affc0ebff9cdec85acc8b8a1762Affected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86fAffected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before e60ad83f645ee6fadd5a8057ba267aeec54f08feAffected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before cc80d3c37cec9d6ddb140483647901bc7cc6c31dAffected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 32e6aea33944f364d51cd263e4cd236393a188b6Affected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 29952ab85d6c3fe0b7909d9a737f10c58bf6824dAffected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 22e7e400fd1a890db2ea13686324aff50e972f4fAffected 0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 629e052d0c98e46dde9f0824f0aa437f678d9b8fAffected
LinuxLinux	4.9Affected before 4.9Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 33794e8e9bcb4affc0ebff9cdec85acc8b8a1762Affected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86fAffected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before e60ad83f645ee6fadd5a8057ba267aeec54f08feAffected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before cc80d3c37cec9d6ddb140483647901bc7cc6c31dAffected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 32e6aea33944f364d51cd263e4cd236393a188b6Affected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 29952ab85d6c3fe0b7909d9a737f10c58bf6824dAffected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 22e7e400fd1a890db2ea13686324aff50e972f4fAffected
0cb2aa690c7ef14ad1f544288349abb5434bb75d to before 629e052d0c98e46dde9f0824f0aa437f678d9b8fAffected

LinuxLinux

4.9Affected
before 4.9Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.