CVE-2022-49725

CVE-2022-49725

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix call trace in setup_tx_descriptors

After PF reset and ethtool -t there was call trace in dmesg

sometimes leading to panic. When there was some time, around 5

seconds, between reset and test there were no errors.

Problem was that pf reset calls i40e_vsi_close in prep_for_reset

and ethtool -t calls i40e_vsi_close in diag_test. If there was not

enough time between those commands the second i40e_vsi_close starts

before previous i40e_vsi_close was done which leads to crash.

Add check to diag_test if pf is in reset and don't start offline

tests if it is true.

Add netif_info("testing failed") into unhappy path of i40e_diag_test()

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Published
2025-02-26T12:01Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.2, < 4.14.2854.14.285
linux/linux_kernel≥ 4.15, < 4.19.2494.19.249
linux/linux_kernel≥ 4.20, < 5.4.2005.4.200
linux/linux_kernel≥ 5.5, < 5.10.1245.10.124
linux/linux_kernel≥ 5.11, < 5.15.495.15.49
linux/linux_kernel≥ 5.16, < 5.18.65.18.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 26 FEB 02:24Z
    i40e: Fix call trace in setup_tx_descriptors
    cvelistv5