CVE-2022-49670
Severity CVSS v4.0:
Pending analysis
Type:
CWE-369
Divide By Zero
Publication date:
26/02/2025
Last modified:
01/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
linux/dim: Fix divide by 0 in RDMA DIM<br />
<br />
Fix a divide 0 error in rdma_dim_stats_compare() when prev->cpe_ratio ==<br />
0.<br />
<br />
CallTrace:<br />
Hardware name: H3C R4900 G3/RS33M2C9S, BIOS 2.00.37P21 03/12/2020<br />
task: ffff880194b78000 task.stack: ffffc90006714000<br />
RIP: 0010:backport_rdma_dim+0x10e/0x240 [mlx_compat]<br />
RSP: 0018:ffff880c10e83ec0 EFLAGS: 00010202<br />
RAX: 0000000000002710 RBX: ffff88096cd7f780 RCX: 0000000000000064<br />
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001<br />
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000<br />
R10: 0000000000000000 R11: 0000000000000000 R12: 000000001d7c6c09<br />
R13: ffff88096cd7f780 R14: ffff880b174fe800 R15: 0000000000000000<br />
FS: 0000000000000000(0000) GS:ffff880c10e80000(0000)<br />
knlGS:0000000000000000<br />
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033<br />
CR2: 00000000a0965b00 CR3: 000000000200a003 CR4: 00000000007606e0<br />
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000<br />
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400<br />
PKRU: 55555554<br />
Call Trace:<br />
<br />
ib_poll_handler+0x43/0x80 [ib_core]<br />
irq_poll_softirq+0xae/0x110<br />
__do_softirq+0xd1/0x28c<br />
irq_exit+0xde/0xf0<br />
do_IRQ+0x54/0xe0<br />
common_interrupt+0x8f/0x8f<br />
<br />
? cpuidle_enter_state+0xd9/0x2a0<br />
? cpuidle_enter_state+0xc7/0x2a0<br />
? do_idle+0x170/0x1d0<br />
? cpu_startup_entry+0x6f/0x80<br />
? start_secondary+0x1b9/0x210<br />
? secondary_startup_64+0xa5/0xb0<br />
Code: 0f 87 e1 00 00 00 8b 4c 24 14 44 8b 43 14 89 c8 4d 63 c8 44 29 c0 99 31 d0 29 d0 31 d2 48 98 48 8d 04 80 48 8d 04 80 48 c1 e0 02 f7 f1 48 83 f8 0a 0f 86 c1 00 00 00 44 39 c1 7f 10 48 89 df<br />
RIP: backport_rdma_dim+0x10e/0x240 [mlx_compat] RSP: ffff880c10e83ec0
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.3 (including) | 5.4.204 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.5 (including) | 5.10.129 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.53 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 5.18.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0b6e0eb5c45e79e9095de2498cc0ca5ec563fc5e
- https://git.kernel.org/stable/c/0fe3dbbefb74a8575f61d7801b08dbc50523d60d
- https://git.kernel.org/stable/c/5af106f8e072aebd88b95e164a08fa320651a99a
- https://git.kernel.org/stable/c/7c1963391af51ee322378d1b2849c60e9037f069
- https://git.kernel.org/stable/c/fae2a9fb1eaf348ad8732f90d42ebbb971bd7e95



