{"id":"CVE-2022-49931","summary":"IB/hfi1: Correctly move list in sc_disable()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nIB/hfi1: Correctly move list in sc_disable()\n\nCommit 13bac861952a (\"IB/hfi1: Fix abba locking issue with sc_disable()\")\nincorrectly tries to move a list from one list head to another.  The\nresult is a kernel crash.\n\nThe crash is triggered when a link goes down and there are waiters for a\nsend to complete.  The following signature is seen:\n\n  BUG: kernel NULL pointer dereference, address: 0000000000000030\n  [...]\n  Call Trace:\n   sc_disable+0x1ba/0x240 [hfi1]\n   pio_freeze+0x3d/0x60 [hfi1]\n   handle_freeze+0x27/0x1b0 [hfi1]\n   process_one_work+0x1b0/0x380\n   ? process_one_work+0x380/0x380\n   worker_thread+0x30/0x360\n   ? process_one_work+0x380/0x380\n   kthread+0xd7/0x100\n   ? kthread_complete_and_exit+0x20/0x20\n   ret_from_fork+0x1f/0x30\n\nThe fix is to use the correct call to move the list.","modified":"2026-04-03T13:14:19.486240313Z","published":"2025-05-01T14:11:08.135Z","related":["SUSE-SU-2025:01918-1","SUSE-SU-2025:01966-1","SUSE-SU-2025:01983-1","SUSE-SU-2025:02173-1","SUSE-SU-2025:02262-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49931.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1afac08b39d85437187bb2a92d89a741b1078f55"},{"type":"WEB","url":"https://git.kernel.org/stable/c/25760a41e3802f54aadcc31385543665ab349b8e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7c4260f8f188df32414a5ecad63e8b934c2aa3f0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b8bcff99b07cc175a6ee12a52db51cdd2229586c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ba95409d6b580501ff6d78efd00064f7df669926"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49931.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49931"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d997d4e4365f7e59cf6b59c70f966c56d704b64f"},{"fixed":"25760a41e3802f54aadcc31385543665ab349b8e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d98883f6c33e0d960afedcecaa92fc2b61fec383"},{"fixed":"7c4260f8f188df32414a5ecad63e8b934c2aa3f0"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"13bac861952a78664907a0f927d3e874e9a59034"},{"fixed":"ba95409d6b580501ff6d78efd00064f7df669926"},{"fixed":"b8bcff99b07cc175a6ee12a52db51cdd2229586c"},{"fixed":"1afac08b39d85437187bb2a92d89a741b1078f55"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0"},{"last_affected":"5d33bd6b4d4d035e42733592899918a18f2540da"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49931.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}