CVE-2022-48930

RDMA/ib_srp: Fix a deadlock

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushing system_long_wq is deadlock-prone and since that call is redundant with a preceding cancel_work_sync()

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.03%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/8cc342508f9e7fdccd2e9758ae9d52aff72dab7f patch
https://git.kernel.org/stable/c/4752fafb461821f8c8581090c923ababba68c5bd patch
https://git.kernel.org/stable/c/d7997d19dfa7001ca41e971cd9efd091bb195b51 patch
https://git.kernel.org/stable/c/901206f71e6ad2b2e7accefc5199a438d173c25f patch
https://git.kernel.org/stable/c/99eb8d694174c777558dc902d575d1997d5ca650 patch
https://git.kernel.org/stable/c/c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4 patch
https://git.kernel.org/stable/c/98d056603ce55ceb90631b3927151c190dfb1b27 patch
https://git.kernel.org/stable/c/081bdc9fe05bb23248f5effb6f811da3da4b8252 patch

Frequently Asked Questions

What is the severity of CVE-2022-48930?
CVE-2022-48930 has been scored as a medium severity vulnerability.
How to fix CVE-2022-48930?
To fix CVE-2022-48930, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-48930 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-48930 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-48930?
CVE-2022-48930 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.