PT-2025-25967 · Linux+4 · Linux Kernel+4

Published 2022-07-25 · Updated 2025-07-15 · CVE-2022-50041

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc6+

Description A vulnerability in the Linux kernel has been resolved, which was causing a call trace with a null VSI during VF reset. The issue occurred during stress tests with attaching and detaching VF from KVM and simultaneously changing VFs spoofcheck and trust. The vulnerability was related to the ice reset vf function, which is responsible for disabling VF's Tx/Rx queues when VF is disabled. However, when VF is already removed, there is no need to reset or disable queues, making the WARN ON() check unnecessary and causing a call trace.

Recommendations For Linux kernel versions prior to 5.19.0-rc6+, remove the WARN ON() check from the ice reset vf function to prevent the call trace. Additionally, add a "VF is already removed" message in the dev dbg() function to provide more informative debugging output. As a temporary workaround, consider disabling the ice reset vf function until a patch is available.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-371

CWE-617

Related Identifiers

BDU:2026-03400

CESA-2023_2951

CVE-2022-50041

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 580

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50041.json · Exploit
• https://git.kernel.org/stable/c/cf90b74341eecc32ceef0c136954a1668e43b1e7 · Patch
• https://ubuntu.com/security/CVE-2022-50041 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03400 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50041 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50041 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02321-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50041 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50041 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50041 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50041 · Vendor Advisory
• https://git.kernel.org/stable/c/af1b0d1547dd1686ae842cac7f3678649a5cbd89 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02264-1 · Vendor Advisory
• https://bugzilla.suse.com/1243627 · Note
• https://suse.com/security/cve/CVE-2022-49937 · Note