CVE-2022-49625
published 2025-02-26CVE-2022-49625: In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
sfc: fix kernel panic when creating VF
When creating VFs a kernel panic can happen when calling to
efx_ef10_try_update_nic_stats_vf.
When releasing a DMA coherent buffer, sometimes, I don't know in what
specific circumstances, it has to unmap memory with vunmap. It is
disallowed to do that in IRQ context or with BH disabled. Otherwise, we
hit this line in vunmap, causing the crash:
BUG_ON(in_interrupt());
This patch reenables BH to release the buffer.
Log messages when the bug is hit:
kernel BUG at mm/vmalloc.c:2727!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1
Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020
RIP: 0010:vunmap+0x2e/0x30
...skip...
Call Trace:
__iommu_dma_free+0x96/0x100
efx_nic_free_buffer+0x2b/0x40 [sfc]
efx_ef10_try_update_nic_stats_vf+0x14a/0x1c0 [sfc]
efx_ef10_update_stats_vf+0x18/0x40 [sfc]
efx_start_all+0x15e/0x1d0 [sfc]
efx_net_open+0x5a/0xe0 [sfc]
__dev_open+0xe7/0x1a0
__dev_change_flags+0x1d7/0x240
dev_change_flags+0x21/0x60
...skip...
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < d9840212a9c00507347c703f4fdeda16400407e0 | d9840212a9c00507347c703f4fdeda16400407e0 |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < b9072305270579a9d6afc9b926166231e5b1a7c8 | b9072305270579a9d6afc9b926166231e5b1a7c8 |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < 82bcb730f856086f033e6c04082eb4503d4c2fa4 | 82bcb730f856086f033e6c04082eb4503d4c2fa4 |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < da346adcf5573fd8663cabfdfe8371009629a906 | da346adcf5573fd8663cabfdfe8371009629a906 |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < b82e4ad58a7fb72456503958a93060f87896e629 | b82e4ad58a7fb72456503958a93060f87896e629 |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < 68e5f32f0de9594629ff9e599294d9801c6187de | 68e5f32f0de9594629ff9e599294d9801c6187de |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < 16662524ec5da801fb78a1afcaf6e782f1cf103a | 16662524ec5da801fb78a1afcaf6e782f1cf103a |
| linux | linux | >= d778819609a27efd5358da8151a0ad3507243e19 < ada74c5539eba06cf8b47d068f92e0b3963a9a6e | ada74c5539eba06cf8b47d068f92e0b3963a9a6e |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.136-1 | 5.10.136-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.10 < 4.14.289 | 4.14.289 |
| linux | linux_kernel | >= 4.15 < 4.19.253 | 4.19.253 |
| linux | linux_kernel | >= 4.2 < 4.9.324 | 4.9.324 |
| linux | linux_kernel | >= 4.20 < 5.4.207 | 5.4.207 |
| linux | linux_kernel | >= 5.11 < 5.15.56 | 5.15.56 |
| linux | linux_kernel | >= 5.16 < 5.18.13 | 5.18.13 |
| linux | linux_kernel | >= 5.5 < 5.10.132 | 5.10.132 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: sfc: fix kernel panic when creating VF
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49625 [MEDIUM] kernel: sfc: fix kernel panic when creating VF
kernel: sfc: fix kernel panic when creating VF
In the Linux kernel, the following vulnerability has been resolved:
sfc: fix kernel panic when creating VF
When creating VFs a kernel panic can happen when calling to
efx_ef10_try_update_nic_stats_vf.
When releasing a DMA coherent buffer, sometimes, I don't know in what
specific circumstances, it has to unmap memory with vunmap. It is
disallowed to do that in IRQ context or with BH disabled. Otherwise, we
hit this line in vunmap, causing the crash:
BUG_ON(in_interrupt());
This patch reenables BH to release the buffer.
Log messages when the bug is hit:
kernel BUG at mm/vmalloc.c:2727!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1
Hardware name
Debian
CVE-2022-49625: linux - In the Linux kernel, the following vulnerability has been resolved: sfc: fix ke...
vendor_debian·2022·CVSS 5.5
CVE-2022-49625 [MEDIUM] CVE-2022-49625: linux - In the Linux kernel, the following vulnerability has been resolved: sfc: fix ke...
In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling to efx_ef10_try_update_nic_stats_vf. When releasing a DMA coherent buffer, sometimes, I don't know in what specific circumstances, it has to unmap memory with vunmap. It is disallowed to do that in IRQ context or with BH disabled. Otherwise, we hit this line in vunmap, causing the crash: BUG_ON(in_interrupt()); This patch reenables BH to release the buffer. Log messages when the bug is hit: kernel BUG at mm/vmalloc.c:2727! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1 Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08
GHSA
GHSA-2g78-g7c6-x75p: In the Linux kernel, the following vulnerability has been resolved:
sfc: fix kernel panic when creating VF
When creating VFs a kernel panic can happ
ghsa_unreviewed·2025-10-23
CVE-2022-49625 [MEDIUM] CWE-476 GHSA-2g78-g7c6-x75p: In the Linux kernel, the following vulnerability has been resolved:
sfc: fix kernel panic when creating VF
When creating VFs a kernel panic can happ
In the Linux kernel, the following vulnerability has been resolved:
sfc: fix kernel panic when creating VF
When creating VFs a kernel panic can happen when calling to
efx_ef10_try_update_nic_stats_vf.
When releasing a DMA coherent buffer, sometimes, I don't know in what
specific circumstances, it has to unmap memory with vunmap. It is
disallowed to do that in IRQ context or with BH disabled. Otherwise, we
hit this line in vunmap, causing the crash:
BUG_ON(in_interrupt());
This patch reenables BH to release the buffer.
Log messages when the bug is hit:
kernel BUG at mm/vmalloc.c:2727!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1
Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8
OSV
CVE-2022-49625: In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen
osv·2025-02-26·CVSS 5.5
CVE-2022-49625 [MEDIUM] CVE-2022-49625: In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen
In the Linux kernel, the following vulnerability has been resolved: sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling to efx_ef10_try_update_nic_stats_vf. When releasing a DMA coherent buffer, sometimes, I don't know in what specific circumstances, it has to unmap memory with vunmap. It is disallowed to do that in IRQ context or with BH disabled. Otherwise, we hit this line in vunmap, causing the crash: BUG_ON(in_interrupt()); This patch reenables BH to release the buffer. Log messages when the bug is hit: kernel BUG at mm/vmalloc.c:2727! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1 Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/16662524ec5da801fb78a1afcaf6e782f1cf103ahttps://git.kernel.org/stable/c/68e5f32f0de9594629ff9e599294d9801c6187dehttps://git.kernel.org/stable/c/82bcb730f856086f033e6c04082eb4503d4c2fa4https://git.kernel.org/stable/c/ada74c5539eba06cf8b47d068f92e0b3963a9a6ehttps://git.kernel.org/stable/c/b82e4ad58a7fb72456503958a93060f87896e629https://git.kernel.org/stable/c/b9072305270579a9d6afc9b926166231e5b1a7c8https://git.kernel.org/stable/c/d9840212a9c00507347c703f4fdeda16400407e0https://git.kernel.org/stable/c/da346adcf5573fd8663cabfdfe8371009629a906
2025-02-26
Published