PT-2025-40663 · Linux+2 · Linux Kernel+2

Published 2025-10-04 · Updated 2025-10-04 · CVE-2022-50476

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where TX/RX callback handlers (ntb netdev tx handler(), ntb netdev rx handler()) can be called in interrupt context via the DMA framework. This can occur when DMA operations are completed. Calls to free skb's within these handlers previously used the interrupt unsafe dev kfree skb() function. This has not presented an issue on Intel IOAT DMA engines, but on AMD systems, a kernel WARNING message is encountered from skb release head state() due to in hardirq() being true. This issue resulted in poor TCP/IP performance across the ntb netdev interface, approximately an order of magnitude below expected results. Using dev kfree skb any() resolves the kernel WARNINGs and restores TCP/IP performance to approximately 20 Gb/s on AMD Milan based servers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2022-50476

Affected Products

Amd

Intel Ioat Dma

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50476.json · Exploit
• https://git.kernel.org/stable/c/dd860b39aa7c7b82e6c99b6fdb99d4610ce49d67 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50476 · Vendor Advisory
• https://git.kernel.org/stable/c/13286ad1c7c49c606fdcba4cf66f953a1a16c1ca · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50476 · Vendor Advisory
• https://git.kernel.org/stable/c/8b78493968ed3cef0326183ed059c55e42f24d5b · Patch
• https://git.kernel.org/stable/c/07e28a8f450217db679802ebd4de0915556ce846 · Patch
• https://git.kernel.org/stable/c/5f7d78b2b12a9d561f48fa00bab29b40f4616dad · Patch
• https://cve.org/CVERecord?id=CVE-2022-50476 · Security Note
• https://git.kernel.org/stable/c/d4460c82177899751975180c268f352893302221 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50476 · Vendor Advisory
• https://git.kernel.org/stable/c/a6b9e09403102bdf8402dae734800e4916c7ea58 · Patch
• https://osv.dev/vulnerability/CVE-2022-50476 · Vendor Advisory
• https://git.kernel.org/stable/c/21296a52caa6a6bad6debdfe40ad81d4f1a27e69 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50476 · Security Note