{"id":"DEBIAN-CVE-2022-49536","details":"In the Linux kernel, the following vulnerability has been resolved:  scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock  During stress I/O tests with 500+ vports, hard LOCKUP call traces are observed.  CPU A:  native_queued_spin_lock_slowpath+0x192  _raw_spin_lock_irqsave+0x32  lpfc_handle_fcp_err+0x4c6  lpfc_fcp_io_cmd_wqe_cmpl+0x964  lpfc_sli4_fp_handle_cqe+0x266  __lpfc_sli4_process_cq+0x105  __lpfc_sli4_hba_process_cq+0x3c  lpfc_cq_poll_hdler+0x16  irq_poll_softirq+0x76  __softirqentry_text_start+0xe4  irq_exit+0xf7  do_IRQ+0x7f  CPU B:  native_queued_spin_lock_slowpath+0x5b  _raw_spin_lock+0x1c  lpfc_abort_handler+0x13e  scmd_eh_abort_handler+0x85  process_one_work+0x1a7  worker_thread+0x30  kthread+0x112  ret_from_fork+0x1f  Diagram of lockup:  CPUA                            CPUB ----                            ---- lpfc_cmd-\u003ebuf_lock                             phba-\u003ehbalock                             lpfc_cmd-\u003ebuf_lock phba-\u003ehbalock  Fix by reordering the taking of the lpfc_cmd-\u003ebuf_lock and phba-\u003ehbalock in lpfc_abort_handler routine so that it tries to take the lpfc_cmd-\u003ebuf_lock first before phba-\u003ehbalock.","modified":"2026-09-01T16:05:32.597120396Z","published":"2025-02-26T07:01:29.580Z","upstream":["CVE-2022-49536"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49536"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49536.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49536.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49536.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}