CVE-2022-48842

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix race condition during interface enslave

Commit 5dbbbd01cbba83 ("ice: Avoid RTNL lock when re-creating

auxiliary device") changes a process of re-creation of aux device

so ice_plug_aux_dev() is called from ice_service_task() context.

This unfortunately opens a race window that can result in dead-lock

when interface has left LAG and immediately enters LAG again.

Reproducer:

```

#!/bin/sh

ip link add lag0 type bond mode 1 miimon 100

ip link set lag0

for n in {1..10}; do

echo Cycle: $n

ip link set ens7f0 master lag0

sleep 1

ip link set ens7f0 nomaster

done

```

This results in:

[20976.208697] Workqueue: ice ice_service_task [ice]

[20976.213422] Call Trace:

[20976.215871] __schedule+0x2d1/0x830

[20976.219364] schedule+0x35/0xa0

[20976.222510] schedule_preempt_disabled+0xa/0x10

[20976.227043] __mutex_lock.isra.7+0x310/0x420

[20976.235071] enum_all_gids_of_dev_cb+0x1c/0x100 [

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References