CVE-2022-49858
published 2025-05-01CVE-2022-49858: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE count which…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
6.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix SQE threshold checking
Current way of checking available SQE count which is based on
HW updated SQB count could result in driver submitting an SQE
even before CQE for the previously transmitted SQE at the same
index is processed in NAPI resulting losing SKB pointers,
hence a leak. Fix this by checking a consumer index which
is updated once CQE is processed.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.10-1 (bookworm) | linux 6.0.10-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3ca6c4c882a7f34085b170d93cf0d0e843aa00e6 < 015e3c0a3b16193aab23beefe4719484b9984c2d | 015e3c0a3b16193aab23beefe4719484b9984c2d |
| linux | linux | >= 3ca6c4c882a7f34085b170d93cf0d0e843aa00e6 < f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb | f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 0 < 6.0.10-1 | 6.0.10-1 |
| linux | linux_kernel | >= 5.6 < 6.0.9 | 6.0.9 |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-49858: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE cou
osv·2025-05-01·CVSS 5.5
CVE-2022-49858 [MEDIUM] CVE-2022-49858: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE cou
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE count which is based on HW updated SQB count could result in driver submitting an SQE even before CQE for the previously transmitted SQE at the same index is processed in NAPI resulting losing SKB pointers, hence a leak. Fix this by checking a consumer index which is updated once CQE is processed.
GHSA
GHSA-6chx-4cx4-vrw4: In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix SQE threshold checking
Current way of checking available SQE c
ghsa_unreviewed·2025-05-01
CVE-2022-49858 [MEDIUM] GHSA-6chx-4cx4-vrw4: In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix SQE threshold checking
Current way of checking available SQE c
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix SQE threshold checking
Current way of checking available SQE count which is based on
HW updated SQB count could result in driver submitting an SQE
even before CQE for the previously transmitted SQE at the same
index is processed in NAPI resulting losing SKB pointers,
hence a leak. Fix this by checking a consumer index which
is updated once CQE is processed.
Microsoft
octeontx2-pf: Fix SQE threshold checking
vendor_msrc·2025-05-13·CVSS 5.5
CVE-2022-49858 [MEDIUM] octeontx2-pf: Fix SQE threshold checking
octeontx2-pf: Fix SQE threshold checking
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Red Hat
kernel: octeontx2-pf: Fix SQE threshold checking
vendor_redhat·2025-05-01·CVSS 5.5
CVE-2022-49858 [MEDIUM] kernel: octeontx2-pf: Fix SQE threshold checking
kernel: octeontx2-pf: Fix SQE threshold checking
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix SQE threshold checking
Current way of checking available SQE count which is based on
HW updated SQB count could result in driver submitting an SQE
even before CQE for the previously transmitted SQE at the same
index is processed in NAPI resulting losing SKB pointers,
hence a leak. Fix this by checking a consumer index which
is updated once CQE is processed.
Statement: The patch fixes an issue in the octeontx2-pf driver where the SQE (Send Queue Entry) availability check was incorrect. The old method relied on hardware-updated SQB counts and could falsely allow new SQEs to be submitted before the completion (CQE) of prior ones. This race condition could re
Debian
CVE-2022-49858: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-p...
vendor_debian·2022·CVSS 5.5
CVE-2022-49858 [MEDIUM] CVE-2022-49858: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-p...
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE count which is based on HW updated SQB count could result in driver submitting an SQE even before CQE for the previously transmitted SQE at the same index is processed in NAPI resulting losing SKB pointers, hence a leak. Fix this by checking a consumer index which is updated once CQE is processed.
Scope: local
bookworm: resolved (fixed in 6.0.10-1)
bullseye: open
forky: resolved (fixed in 6.0.10-1)
sid: resolved (fixed in 6.0.10-1)
trixie: resolved (fixed in 6.0.10-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-49858 kernel: octeontx2-pf: Fix SQE threshold checking
bugzilla·2025-05-01·CVSS 5.5
CVE-2022-49858 [MEDIUM] CVE-2022-49858 kernel: octeontx2-pf: Fix SQE threshold checking
CVE-2022-49858 kernel: octeontx2-pf: Fix SQE threshold checking
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix SQE threshold checking
Current way of checking available SQE count which is based on
HW updated SQB count could result in driver submitting an SQE
even before CQE for the previously transmitted SQE at the same
index is processed in NAPI resulting losing SKB pointers,
hence a leak. Fix this by checking a consumer index which
is updated once CQE is processed.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025050146-CVE-2022-49858-a1ee@gregkh/T
Bugzilla
CVE-2022-40153 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
bugzilla·2022-10-13
CVE-2022-40153 [MEDIUM] CVE-2022-40153 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
CVE-2022-40153 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49858
https://github.com/x-stream/xstream/issues/304
Discussion:
Created xstream tracking bugs for this issue:
Affects: epel-all [bug 2134301]
Affects: fedora-all [bug 2134302]
---
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2022-40153
---
This issue has been
2025-05-01
Published