Ubuntu: (CVE-2022-49537): linux vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix call trace observed during I/O with CMF enabled The following was seen with CMF enabled: BUG: using smp_processor_id() in preemptible code: systemd-udevd/31711 kernel: caller is lpfc_update_cmf_cmd+0x214/0x420 [lpfc] kernel: CPU: 12 PID: 31711 Comm: systemd-udevd kernel: Call Trace: kernel: <TASK> kernel: dump_stack_lvl+0x44/0x57 kernel: check_preemption_disabled+0xbf/0xe0 kernel: lpfc_update_cmf_cmd+0x214/0x420 [lpfc] kernel: lpfc_nvme_fcp_io_submit+0x23b4/0x4df0 [lpfc] this_cpu_ptr() calls smp_processor_id() in a preemptible context. Fix by using per_cpu_ptr() with raw_smp_processor_id() instead.
Solution(s)
- ubuntu-upgrade-linux
- ubuntu-upgrade-linux-aws
- ubuntu-upgrade-linux-aws-5-15
- ubuntu-upgrade-linux-azure
- ubuntu-upgrade-linux-azure-5-15
- ubuntu-upgrade-linux-gcp
- ubuntu-upgrade-linux-gcp-5-15
- ubuntu-upgrade-linux-gke
- ubuntu-upgrade-linux-gkeop
- ubuntu-upgrade-linux-hwe-5-15
- ubuntu-upgrade-linux-ibm
- ubuntu-upgrade-linux-intel-iotg
- ubuntu-upgrade-linux-intel-iotg-5-15
- ubuntu-upgrade-linux-kvm
- ubuntu-upgrade-linux-lowlatency
- ubuntu-upgrade-linux-lowlatency-hwe-5-15
- ubuntu-upgrade-linux-nvidia
- ubuntu-upgrade-linux-oracle
- ubuntu-upgrade-linux-oracle-5-15
- ubuntu-upgrade-linux-raspi
- ubuntu-upgrade-linux-realtime
- ubuntu-upgrade-linux-riscv-5-15
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center