In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63 cve-icon cve-icon
https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967 cve-icon cve-icon
https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115 cve-icon cve-icon
https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7 cve-icon cve-icon
https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd cve-icon cve-icon
https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca cve-icon cve-icon
https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022633-CVE-2022-49725-5494@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49725 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49725 cve-icon
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00135}

 epss

{'score': 0.00134}

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()
Title i40e: Fix call trace in setup_tx_descriptors
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T02:24:37.349Z

Updated: 2025-05-04T08:44:08.894Z

Reserved: 2025-02-26T02:21:30.447Z

Link: CVE-2022-49725

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-02-26T07:01:48.167

Modified: 2025-02-26T07:01:48.167

Link: CVE-2022-49725

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49725 - Bugzilla