CVE-2022-49542

Summary

CVE-2022-49542 is a vulnerability affecting the Linux kernel's lpfc driver. When attempting to log a message using LOG_TRACE_EVENT, a hard lockup occurs due to a repeated attempt by the same CPU to claim the phba->port_list_lock. This issue stems from the order of checks in the function lpfc_dmp_dbg(). To resolve the vulnerability, the checks for cfg_log_verbose should be moved before calling lpfc_dmp_dbg() and integrated into lpfc_printf_vlog() and lpfc_printf_log() macros. Failure to address this issue may result in a hard lockup and kernel panic.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.