CVE-2022-49227

EUVD-2022-54999
In the Linux kernel, the following vulnerability has been resolved:

igc: avoid kernel warning when changing RX ring parameters

Calling ethtool changing the RX ring parameters like this:

  $ ethtool -G eth0 rx 1024

on igc triggers kernel warnings like this:

[  225.198467] ------------[ cut here ]------------
[  225.198473] Missing unregister, handled but fix driver
[  225.198485] WARNING: CPU: 7 PID: 959 at net/core/xdp.c:168
xdp_rxq_info_reg+0x79/0xd0
[...]
[  225.198601] Call Trace:
[  225.198604]  <TASK>
[  225.198609]  igc_setup_rx_resources+0x3f/0xe0 [igc]
[  225.198617]  igc_ethtool_set_ringparam+0x30e/0x450 [igc]
[  225.198626]  ethnl_set_rings+0x18a/0x250
[  225.198631]  genl_family_rcv_msg_doit+0xca/0x110
[  225.198637]  genl_rcv_msg+0xce/0x1c0
[  225.198640]  ? rings_prepare_data+0x60/0x60
[  225.198644]  ? genl_get_cmd+0xd0/0xd0
[  225.198647]  netlink_rcv_skb+0x4e/0xf0
[  225.198652]  genl_rcv+0x24/0x40
[  225.198655]  netlink_unicast+0x20e/0x330
[  225.198659]  netlink_sendmsg+0x23f/0x480
[  225.198663]  sock_sendmsg+0x5b/0x60
[  225.198667]  __sys_sendto+0xf0/0x160
[  225.198671]  ? handle_mm_fault+0xb2/0x280
[  225.198676]  ? do_user_addr_fault+0x1eb/0x690
[  225.198680]  __x64_sys_sendto+0x20/0x30
[  225.198683]  do_syscall_64+0x38/0x90
[  225.198687]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  225.198693] RIP: 0033:0x7f7ae38ac3aa

igc_ethtool_set_ringparam() copies the igc_ring structure but neglects to
reset the xdp_rxq_info member before calling igc_setup_rx_resources().
This in turn calls xdp_rxq_info_reg() with an already registered xdp_rxq_info.

Make sure to unregister the xdp_rxq_info structure first in
igc_setup_rx_resources.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.13 ≤
𝑥
< 5.15.33
linuxlinux_kernel
5.16 ≤
𝑥
< 5.16.19
linuxlinux_kernel
5.17 ≤
𝑥
< 5.17.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.123-1
fixed
bookworm (security)
6.1.128-1
fixed
bullseye
5.10.223-1
not-affected
bullseye (security)
5.10.234-1
fixed
sid
6.12.16-1
fixed
trixie
6.12.12-1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cluster-md-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
dlm-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
gfs2-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-64kb
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-default
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-default-base
suse enterprise server 15 SP4
5.14.21-150400.24.158.1.150400.24.78.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1.150500.6.47.1
fixed
kernel-docs
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-macros
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-obs-build
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-source
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-syms
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
kernel-zfcpdump
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
ocfs2-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
reiserfs-kmp-default
suse enterprise server 15 SP4
5.14.21-150400.24.158.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.100.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
bpftool
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-abi-stablelists
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-core
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-debug
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-debug-core
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-debug-devel
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-debug-devel-matched
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-debug-modules
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-debug-modules-extra
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-devel
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-devel-matched
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-doc
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-modules
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-modules-extra
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-tools
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-tools-libs
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-tools-libs-devel
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-zfcpdump
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-zfcpdump-core
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-zfcpdump-devel
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-zfcpdump-devel-matched
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-zfcpdump-modules
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
kernel-zfcpdump-modules-extra
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
perf
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed
python3-perf
RHEL 8
0:4.18.0-372.9.1.el8
fixed
RHEL 9
0:5.14.0-162.6.1.el9_1
fixed