Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Yishai Hadas

Researcher fromNVIDIA
#45847of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2022-7440
5.5
2022-09-05
Linux · Linux Kernel · CVE-2022-48675
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a nested dead lock in the IB/core component of the Linux kernel, specifically as part of the ODP flow. This dead lock can occur when the `mmput()` function is called while the `umem odp->umem mutex` is locked, as required by `ib umem odp map dma and lock()`. This may trigger a dead lock when trying to lock the same mutex in the `exit mmap()-> mmu notifier release()->mlx5 ib invalidate range()` flow. The problem can be solved by using `mmput async()` instead, which will execute the `exit mmap()` flow in another task once the lock is available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.