CVE-2022-49003

CVE-2022-49003 involves a race in the Linux kernel NVMe multipath code where walking nvme_ns_head siblings protected by SRCU was not synchronized in nvme_mpath_revalidate_paths(), and concurrent scan work could free a namespace, causing a use-after-free. The fix protects the head’s SRCU during nv...