PT-2025-25979 · Linux+5 · Linux Kernel+5
Published
2022-08-12
·
Updated
2026-03-14
·
CVE-2022-50053
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.18.0
Description
The issue is related to the iavf driver in the Linux kernel. It involves a problem with reset error handling, where calling iavf close in iavf reset task error handling can lead to a deadlock due to a double call of napi disable. This can cause the iavf remove task to become stuck, as it requires crit lock, which is held by iavf close. The error handling can also lead to iavf remove being stuck when the hardware fails to set up the VF mailbox during rapid VF resets.
Recommendations
For Linux kernel versions prior to 5.18.0, the issue can be resolved by applying the fix for reset error handling, which involves calling iavf disable vf if reset fails, allowing the driver to clean up remaining invalid resources. As a temporary workaround, consider disabling the iavf driver until a patch is available. Restrict access to the iavf remove task to minimize the risk of exploitation.
Exploit
Fix
Improper Resource Release
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Centos
Debian
Linux Kernel
Red Hat
Suse