Linux kernel (drivers/infiniband/sw/siw): A remote peer crashes the node during connection setup. When the MPA

CVSS 7.5CVE-2022-50136Firmware, BMC & network fabriccurated

Impact

A remote peer crashes the node during connection setup. When the MPA handshake reply arrives incomplete, siw reports the connect-reply event twice and the iWARP CM hits a hard BUG() - an immediate kernel panic driven entirely from the wire, before any application-level authentication.

Who can reach it

Network-reachable and pre-authentication: a peer the node connects to (or that controls TCP segmentation toward it) sends the MPA reply split so siw sees a partial read. The upstream reproducer is stock ib_send_lat between two hosts, so this fires on ordinary traffic patterns, not just hostile crafting. Requires the siw (soft-iWARP) module to be loaded.

What to do

No fixed release is published in this record - apply the listed stable fix commits or run a current stable kernel. Interim: unload/blacklist siw unless soft-iWARP is genuinely in use, and restrict which peers may complete iWARP connections to the node.

References

https://git.kernel.org/stable/c/11edf0bba15ea9df49478affec7974f351bb2f6e https://git.kernel.org/stable/c/9ade92ddaf2347fb34298c02080caaa3cdd7c27b https://nvd.nist.gov/vuln/detail/CVE-2022-50136

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.