CVE-2022-49321

Summary

CVE-2022-49321: A vulnerability has been identified in the Linux kernel's xprtrdma component. When an RDMA server returns a fault format reply in NFS v3, the nfs v3 client may incorrectly treat it as a bcall, leading to a NULL pointer dereference. The debug message "RPC: rpcrdma_bc_receive_call: callback XID" indicates the issue, and the kernel crash occurs at "_raw_spin_lock+0xc". This vulnerability can potentially allow an attacker to cause a denial-of-service or gain unauthorized access. The affected components include rpcrdma, ib_core, and ib_core's ib_cq_poll_work. The issue has been resolved in updated kernel versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.