Linux Kernel Vulnerability in NBD Device Handling by Vendor Linux

CVE-2022-50314

What is CVE-2022-50314?

An issue was identified in the Linux kernel where the NBD (Network Block Device) could hang due to improper handling of signal interrupts during device control operations. The vulnerability arises specifically when the 'nbd_start_device_ioctl()' function is waiting for certain conditions related to IO operations. This waiting condition may not be resolved, leading to a hung task. A patch has been implemented to ensure that the queue is cleared properly, preventing potential disruptions in device communication and enhancing the overall stability of the NBD device operations.

References