CVE-2022-48692: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48692 affects the Linux kernel's RDMA/srp subsystem. The vulnerability was discovered in the handling of SCSI commands where a NULL pointer dereference could occur in the srp_recv_done function. This issue affects Linux kernel versions from 5.14 through 5.15.68 and from 5.16 through 5.19.9 (NVD).

The vulnerability stems from improper handling of the scmnd pointer in the srp_process_rsp function. When scmnd is NULL, the code attempts to access scmnd->result, leading to a NULL pointer dereference. This can be reproduced using blktests srp/007. The issue was introduced by commit ad215aaea4f9 ("RDMA/srp: Make struct scsi_cmnd and struct srp_request adjacent"). The vulnerability has a CVSS v3.1 Base Score of 5.5 MEDIUM (Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) (NVD).

When exploited, this vulnerability can cause a kernel NULL pointer dereference, leading to a system crash or denial of service condition. The issue affects systems using the RDMA/srp subsystem for SCSI operations (NVD).

The vulnerability can be triggered through the blktests srp/007 test case. It requires local access to the system and the ability to interact with the RDMA/srp subsystem (NVD).

The vulnerability has been fixed by modifying the code to check if scmnd is NULL before attempting to access its members. The fix was implemented in upstream commit 12f35199a2c0551187edbf8eb01379f0598659fa and has been backported to affected stable kernel versions (Kernel Patch).