PT-2022-7501 · Linux+3 · Linux Kernel+3

Published 2022-02-18 · Updated 2024-09-27 · CVE-2022-48941

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the ice driver in the Linux kernel, specifically with concurrent reset and removal of Virtual Functions (VFs). The problem arises when a VF is removed while it is being reset, leading to potential memory corruption and panics. The root cause of the issue is the lack of proper locking mechanisms to prevent concurrent access to critical tasks such as virtchnl messages or resets. The fix involves protecting both the reset and removal flows using the existing VF cfg lock, ensuring that the VF cannot be removed while outstanding critical tasks are occurring.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2024-06658

CVE-2022-48941

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3408-1

OPENSUSE-SU-2024_3483-1

SUSE-SU-2024:3190-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3227-1

SUSE-SU-2024:3408-1

SUSE-SU-2024:3483-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 675

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48941.json · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/PenteraIO/CVE-2022-23222-POC · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:3408-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3190-1 · Vendor Advisory
• https://git.kernel.org/stable/c/2a3e61de89bab6696aa28b70030eb119968c5586 · Patch
• https://cve.org/CVERecord?id=CVE-2022-48941 · Security Note
• https://git.kernel.org/stable/c/fadead80fe4c033b5e514fcbadd20b55c4494112 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:3209-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06658 · Security Note
• https://git.kernel.org/stable/c/3c805fce07c9dbc47d8a9129c7c5458025951957 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:3483-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48941 · Security Note
• https://git.kernel.org/stable/c/05ae1f0fe9c6c5ead08b306e665763a352d20716 · Patch