CVE-2022-49089

A flaw was found in the Linux kernel’s RDMA subsystem, which supports high-speed networking. Due to a missing safety check, two parts of the system could try to handle an error at the same time. This race condition could cause unexpected behavior or a system crash. A local user with access to RDMA hardware could potentially trigger this issue. The highest impact is system instability or denial of service. The problem was fixed by adding proper safeguards to prevent multiple processes from interfering with each other during error handling.

This vulnerability is rated as Moderate because exploitation requires local user access and is restricted to systems utilizing specific RDMA-capable hardware supported by the rdmavt driver. In standard Red Hat Enterprise Linux deployments, this driver is not actively utilized unless specialized high-performance networking devices are configured. A local attacker triggering this race condition can cause a kernel panic, resulting in a denial of service without compromising system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.