{
  "threat_severity" : "Moderate",
  "public_date" : "2025-02-26T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: linux/dim: Fix divide by 0 in RDMA DIM",
    "id" : "2347919",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2347919"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-369",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\nlinux/dim: Fix divide by 0 in RDMA DIM\nFix a divide 0 error in rdma_dim_stats_compare() when prev->cpe_ratio ==\n0.\nCallTrace:\nHardware name: H3C R4900 G3/RS33M2C9S, BIOS 2.00.37P21 03/12/2020\ntask: ffff880194b78000 task.stack: ffffc90006714000\nRIP: 0010:backport_rdma_dim+0x10e/0x240 [mlx_compat]\nRSP: 0018:ffff880c10e83ec0 EFLAGS: 00010202\nRAX: 0000000000002710 RBX: ffff88096cd7f780 RCX: 0000000000000064\nRDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001\nRBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000000 R12: 000000001d7c6c09\nR13: ffff88096cd7f780 R14: ffff880b174fe800 R15: 0000000000000000\nFS:  0000000000000000(0000) GS:ffff880c10e80000(0000)\nknlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000a0965b00 CR3: 000000000200a003 CR4: 00000000007606e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n<IRQ>\nib_poll_handler+0x43/0x80 [ib_core]\nirq_poll_softirq+0xae/0x110\n__do_softirq+0xd1/0x28c\nirq_exit+0xde/0xf0\ndo_IRQ+0x54/0xe0\ncommon_interrupt+0x8f/0x8f\n</IRQ>\n? cpuidle_enter_state+0xd9/0x2a0\n? cpuidle_enter_state+0xc7/0x2a0\n? do_idle+0x170/0x1d0\n? cpu_startup_entry+0x6f/0x80\n? start_secondary+0x1b9/0x210\n? secondary_startup_64+0xa5/0xb0\nCode: 0f 87 e1 00 00 00 8b 4c 24 14 44 8b 43 14 89 c8 4d 63 c8 44 29 c0 99 31 d0 29 d0 31 d2 48 98 48 8d 04 80 48 8d 04 80 48 c1 e0 02 <49> f7 f1 48 83 f8 0a 0f 86 c1 00 00 00 44 39 c1 7f 10 48 89 df\nRIP: backport_rdma_dim+0x10e/0x240 [mlx_compat] RSP: ffff880c10e83ec0" ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2025-11-11T00:00:00Z",
    "advisory" : "RHSA-2025:20518",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "kernel-0:5.14.0-611.5.1.el9_7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2025-11-11T00:00:00Z",
    "advisory" : "RHSA-2025:20518",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "package" : "kernel-0:5.14.0-611.5.1.el9_7"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Will not fix",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2022-49670\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-49670\nhttps://lore.kernel.org/linux-cve-announce/2025022623-CVE-2022-49670-0b7b@gregkh/T" ],
  "name" : "CVE-2022-49670",
  "csaw" : false
}