CVE-2022-50676

A potential deadlock vulnerability was found in the RDS (Reliable Datagram Sockets) TCP transport in the Linux kernel. In rds_tcp_reset_callbacks(), cancel_delayed_work_sync() is called while holding the socket lock (lock_sock()). However, the worker functions rds_send_xmit() and rds_recv_worker() may also try to acquire lock_sock(), creating a deadlock scenario. This can cause the system to hang.

This is a deadlock vulnerability in the RDS networking subsystem that can cause system hangs when RDS over TCP connections are reset. The vulnerability requires local access and the ability to use RDS sockets.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the rds_tcp module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.