PT-2025-8234 · Linux+2 · Linux Kernel+2
Hou Tao
+1
·
Published
2022-05-27
·
Updated
2025-04-16
·
CVE-2022-49300
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.14.0+
Description
A race condition exists between the
nbd alloc config() function and the removal of the nbd module. When the nbd module is being removed, nbd alloc config() may be called concurrently by nbd genl connect(), leading to a potential leak of nbd config and its related resources, such as recv workq. This can cause a kernel NULL pointer dereference and an oops in nbd read stat() due to the unload of the nbd module.Recommendations
For Linux kernel versions prior to 5.14.0+, update to a newer version that includes the fix for the race condition between
nbd alloc config() and module removal. As a temporary workaround, consider disabling the nbd module until a patch is available. Restrict access to the nbd module to minimize the risk of exploitation. Avoid using the nbd genl connect() function in conjunction with the nbd alloc config() function until the issue is resolved.Exploit
Fix
NULL Pointer Dereference
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse