CVE-2022-49725

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49725

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()

References
Link Resource
https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63 Patch
https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967 Patch
https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115 Patch
https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7 Patch
https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd Patch
https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca Patch
https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
History

24 Oct 2025, 18:53

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: i40e: Se corrige el seguimiento de llamadas en setup_tx_descriptors Después de reiniciar PF y ethtool -t, había un seguimiento de llamadas en dmesg que a veces provocaba pánico. Cuando había un tiempo, alrededor de 5 segundos, entre reiniciar y probar, no había errores. El problema era que pf reset llama a i40e_vsi_close en prep_for_reset y ethtool -t llama a i40e_vsi_close en diag_test. Si no había suficiente tiempo entre esos comandos, el segundo i40e_vsi_close se inicia antes de que se hiciera el i40e_vsi_close anterior, lo que provoca un bloqueo. Agregue una verificación a diag_test si pf está en reinicio y no inicie pruebas fuera de línea si es verdadero. Agregue netif_info("prueba fallida") en la ruta no feliz de i40e_diag_test()
References () https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63 - () https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63 - Patch
References () https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967 - () https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967 - Patch
References () https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115 - () https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115 - Patch
References () https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7 - () https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7 - Patch
References () https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd - () https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd - Patch
References () https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca - () https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca - Patch
References () https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712 - () https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712 - Patch
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-24 18:53

NVD link : CVE-2022-49725

Mitre link : CVE-2022-49725

CVE.ORG link : CVE-2022-49725

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo