CVE-2022-48729: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48729 is a vulnerability in the Linux kernel's IB/hfi1 (InfiniBand Host Fabric Interface) driver that was disclosed on June 20, 2024. The vulnerability occurs when the ipoib send_queue_size is increased from its default value, causing a system panic. This affects Linux kernel versions from 5.16 up to (excluding) 5.16.8, as well as versions 5.17-rc1 and 5.17-rc2 (NVD).

The vulnerability stems from an incorrect shift calculation in the IB/hfi1 driver. The issue occurs when the shift that should have been a function of the txq item size mistakenly used the ring size instead. This leads to a system panic in the hfi1_ipoib_drain_tx_ring function. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability results in a kernel panic, causing an unexpected system crash. This leads to a denial of service condition, affecting system availability. The vulnerability requires local access and low privileges to exploit (NVD).

The vulnerability requires local access with low privileges to exploit. It is triggered when the ipoib send_queue_size parameter is increased from its default value, causing the system to panic during the execution of network-related operations (Kernel Patch).

The vulnerability has been fixed by correcting the shift calculation to use tx_item_size instead of tx_ring_size. The fix is available in the Linux kernel patch that modifies the drivers/infiniband/hw/hfi1/ipoib_tx.c file. Users should update to patched kernel versions to mitigate this vulnerability (Kernel Patch).