CVE-2022-49725
published 2025-02-26CVE-2022-49725: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.30%
22.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix call trace in setup_tx_descriptors
After PF reset and ethtool -t there was call trace in dmesg
sometimes leading to panic. When there was some time, around 5
seconds, between reset and test there were no errors.
Problem was that pf reset calls i40e_vsi_close in prep_for_reset
and ethtool -t calls i40e_vsi_close in diag_test. If there was not
enough time between those commands the second i40e_vsi_close starts
before previous i40e_vsi_close was done which leads to crash.
Add check to diag_test if pf is in reset and don't start offline
tests if it is true.
Add netif_info("testing failed") into unhappy path of i40e_diag_test()
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < 5ba9956ca57e361fb13ea369bb753eb33177acc7 | 5ba9956ca57e361fb13ea369bb753eb33177acc7 |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < 15950157e2c24865b696db1c9ccc72743ae0e967 | 15950157e2c24865b696db1c9ccc72743ae0e967 |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < ff6e03fe84bc917bb0c907d02de668c2fe101712 | ff6e03fe84bc917bb0c907d02de668c2fe101712 |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < 814092927a215f5ca6c08249ec72a205e0b473cd | 814092927a215f5ca6c08249ec72a205e0b473cd |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < 0a4e5a3dc5e41212870e6043895ae02455c93f63 | 0a4e5a3dc5e41212870e6043895ae02455c93f63 |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < 322271351b0e41565171e4cce70ea41854fac115 | 322271351b0e41565171e4cce70ea41854fac115 |
| linux | linux | >= e17bc411aea8fbebc51857037f104ab09f765120 < fd5855e6b1358e816710afee68a1d2bc685176ca | fd5855e6b1358e816710afee68a1d2bc685176ca |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.127-1 | 5.10.127-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 4.15 < 4.19.249 | 4.19.249 |
| linux | linux_kernel | >= 4.2 < 4.14.285 | 4.14.285 |
| linux | linux_kernel | >= 4.20 < 5.4.200 | 5.4.200 |
| linux | linux_kernel | >= 5.11 < 5.15.49 | 5.15.49 |
| linux | linux_kernel | >= 5.16 < 5.18.6 | 5.18.6 |
| linux | linux_kernel | >= 5.5 < 5.10.124 | 5.10.124 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: i40e: Fix call trace in setup_tx_descriptors
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49725 [MEDIUM] kernel: i40e: Fix call trace in setup_tx_descriptors
kernel: i40e: Fix call trace in setup_tx_descriptors
In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix call trace in setup_tx_descriptors
After PF reset and ethtool -t there was call trace in dmesg
sometimes leading to panic. When there was some time, around 5
seconds, between reset and test there were no errors.
Problem was that pf reset calls i40e_vsi_close in prep_for_reset
and ethtool -t calls i40e_vsi_close in diag_test. If there was not
enough time between those commands the second i40e_vsi_close starts
before previous i40e_vsi_close was done which leads to crash.
Add check to diag_test if pf is in reset and don't start offline
tests if it is true.
Add netif_info("testing failed") into unhappy path of i40e_diag_test()
Package: kernel (Red Hat Enterprise
Debian
CVE-2022-49725: linux - In the Linux kernel, the following vulnerability has been resolved: i40e: Fix c...
vendor_debian·2022·CVSS 5.5
CVE-2022-49725 [MEDIUM] CVE-2022-49725: linux - In the Linux kernel, the following vulnerability has been resolved: i40e: Fix c...
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved (fixed in 5.10.127-
GHSA
GHSA-f3hm-2q4w-7w9x: In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix call trace in setup_tx_descriptors
After PF reset and ethtool -t there
ghsa_unreviewed·2025-10-24
CVE-2022-49725 [MEDIUM] GHSA-f3hm-2q4w-7w9x: In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix call trace in setup_tx_descriptors
After PF reset and ethtool -t there
In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix call trace in setup_tx_descriptors
After PF reset and ethtool -t there was call trace in dmesg
sometimes leading to panic. When there was some time, around 5
seconds, between reset and test there were no errors.
Problem was that pf reset calls i40e_vsi_close in prep_for_reset
and ethtool -t calls i40e_vsi_close in diag_test. If there was not
enough time between those commands the second i40e_vsi_close starts
before previous i40e_vsi_close was done which leads to crash.
Add check to diag_test if pf is in reset and don't start offline
tests if it is true.
Add netif_info("testing failed") into unhappy path of i40e_diag_test()
OSV
CVE-2022-49725: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there w
osv·2025-02-26·CVSS 5.5
CVE-2022-49725 [MEDIUM] CVE-2022-49725: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there w
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cdhttps://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176cahttps://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712
2025-02-26
Published