PT-2025-8620 · Linux+3 · Linux Kernel+3

Published

2023-11-07

·

Updated

2025-04-16

·

CVE-2022-49687

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A bug in the Linux kernel's virtio net driver causes a driver bug warning when using virtio net after a suspend/resume sequence. The issue arises because the virtnet freeze() function frees the receive queue completely, including struct xdp rxq info, without calling xdp rxq info unreg(). Similarly, virtnet restore() sets up the receive queue again without calling xdp rxq info reg(). This results in a warning when the network interface is brought down after resuming from suspend.
Recommendations To resolve this issue, modify the virtnet freeze down() and virtnet restore up() functions to call virtnet close() and virtnet open() respectively, ensuring that xdp rxq info unreg() and xdp rxq info reg() are called as needed. Additionally, only cancel the refill work if netif running(). This fix should prevent the driver bug warning and avoid similar problems in the future. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2022-49687
OPENSUSE-SU-2025_1263-1
RHSA-2023:6583
RHSA-2023_6583
SUSE-SU-2025:1027-1
SUSE-SU-2025:1176-1
SUSE-SU-2025:1183-1
SUSE-SU-2025:1194-1
SUSE-SU-2025:1241-1
SUSE-SU-2025:1263-1
SUSE-SU-2025:1293-1
SUSE-SU-2025_1027-1
SUSE-SU-2025_1241-1
SUSE-SU-2025_1263-1
SUSE-SU-2025_1293-1

Affected Products

Astra Linux
Linux Kernel
Red Hat
Suse