Linux kernel (drivers/infiniband/hw/irdma): A permanent kernel hang once any queue-pair goes to error.

CVSS 7.5CVE-2022-48694Firmware, BMC & network fabriccurated

Impact

A permanent kernel hang once any queue-pair goes to error. Software-generated completions for outstanding work are posted to the wrong completion queue, so the send-queue drain never finishes: kernel workers wedge in uninterruptible sleep, and the RDMA storage transports layered on top (NFS/RDMA, nvme-rdma) stall for the entire node, not just the tenant that triggered it.

Who can reach it

Reachable from the fabric: any event that puts a QP into error - a peer disconnecting, a link transition, a cancelled connection - is enough, and the subsequent drain is issued by in-kernel consumers rather than the tenant. No credentials on the host are needed. Requires the irdma module (Intel E810-class RDMA NICs).

What to do

No fixed release is published in this record - apply the listed stable fix commits or run a current stable kernel. There is no clean interim control since the trigger is normal connection teardown; drain workloads off affected irdma nodes and reboot into a patched kernel.

References

https://git.kernel.org/stable/c/14d148401c5202fec3a071e24785481d540b22c3 https://git.kernel.org/stable/c/5becc531a3fa8da75158a8993f56cc3e0717716e https://nvd.nist.gov/vuln/detail/CVE-2022-48694

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.