CVE-2022-49201: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49201 is a race condition vulnerability in the Linux kernel's IBM Virtual Network Interface Controller (ibmvnic) driver. The vulnerability exists between reset and transmit paths, where ibmvnic_xmit() can access a scrq (sub-channel queue) after it has been freed in the reset path (Kernel Git).

The vulnerability occurs when a race condition allows ibmvnicxmit() to access txscrq after it has been freed during a reset operation. This can result in a NULL pointer dereference and kernel crash. The issue stems from the reset path attempting to stop the queue in ibmvniccleanup(), but an in-flight ibmvniccomplete_tx() could restart the queue while the reset is still in progress (Kernel Git).

When exploited, this vulnerability can lead to a kernel crash with a NULL pointer dereference, resulting in a denial of service condition. The crash manifests as 'Kernel attempted to read user page (0) - exploit attempt?' with a kernel oops message (Kernel Git).

The fix involves introducing a new txqueuesactive flag protected by RCU (Read-Copy-Update) locking to properly coordinate between the reset and transmit paths. The patch ensures proper synchronization using rcureadlock() and synchronize_rcu() to prevent the race condition (Kernel Git).