CVE-2022-49076

This vulnerability affects the Linux kernel's RDMA (Remote Direct Memory Access) subsystem, specifically the hfi1 driver. It arises from a use-after-free condition involving the memory management (mm) structure.

This vulnerability is rated as Moderate severity because exploitation requires local privileges on systems utilizing specialized Intel Omni-Path Architecture (OPA) hardware, restricting the attack surface and blast radius primarily to a local denial of service. The affected hfi1 driver is tied directly to high-performance fabric adapters and is not initialized or used on standard hardware configurations. Systems that do not deploy these specialized interconnect devices are unaffected under normal operational conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.