Vulnerability-Lookup

RHSA-2022:6610

Vulnerability from csaf_opensuse - Published: 2022-09-20 00:00 - Updated: 2026-09-20 11:22

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2022:6610. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2022:6610.

Patchnames: RHSA-2022:6610

CVE-2022-2078

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 22 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2022-34918

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 22 products, the same list as for CVE-2022-2078

Threats

Impact important

CVE-2022-49063

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 22 products, the same list as for CVE-2022-2078

Threats

Impact moderate

CVE-2022-49722

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 22 products, the same list as for CVE-2022-2078

Threats

Impact moderate

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2022-2078/	self
https://www.suse.com/security/cve/CVE-2022-34918/	self
https://www.suse.com/security/cve/CVE-2022-49063/	self
https://www.suse.com/security/cve/CVE-2022-49722/	self
https://www.suse.com/security/cve/CVE-2022-2078	external
https://bugzilla.suse.com/1200019	external
https://bugzilla.suse.com/1200522	external
https://www.suse.com/security/cve/CVE-2022-34918	external
https://bugzilla.suse.com/1201171	external
https://bugzilla.suse.com/1201177	external
https://bugzilla.suse.com/1201222	external
https://www.suse.com/security/cve/CVE-2022-49063	external
https://bugzilla.suse.com/1237846	external
https://www.suse.com/security/cve/CVE-2022-49722	external
https://bugzilla.suse.com/1238301	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2022:6610.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:6610.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2022:6610",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_6610.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-2078 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-2078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-34918 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-34918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-49063 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-49063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-49722 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-49722/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:22:44Z",
      "generator": {
        "date": "2022-09-20T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2022:6610",
      "initial_release_date": "2022-09-20T00:00:00Z",
      "revision_history": [
        {
          "date": "2022-09-20T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:22:44Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
                "product": {
                  "name": "kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
                  "product_id": "kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-70.26.1.el9_0?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
                "product": {
                  "name": "kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
                  "product_id": "kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@5.14.0-70.26.1.el9_0?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@5.14.0-70.26.1.el9_0?arch=x86_64\u0026upstream=bpftool-0:5.14.0-70.26.1.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-core@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@5.14.0-70.26.1.el9_0?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-70.26.1.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-70.26.1.el9_0?arch=x86_64\u0026upstream=kernel-debug-0:5.14.0-70.26.1.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@5.14.0-70.26.1.el9_0?arch=x86_64\u0026upstream=kernel-source-0:5.14.0-70.26.1.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-70.26.1.el9_0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "perf-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "perf-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@5.14.0-70.26.1.el9_0?arch=x86_64\u0026upstream=perf-0:5.14.0-70.26.1.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-0:5.14.0-70.26.1.el9_0.x86_64",
                "product": {
                  "name": "python3-perf-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_id": "python3-perf-0:5.14.0-70.26.1.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-perf@5.14.0-70.26.1.el9_0?arch=x86_64\u0026upstream=perf-0:5.14.0-70.26.1.el9_0.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 9",
                "product": {
                  "name": "SUSE Liberty Linux 9",
                  "product_id": "SUSE Liberty Linux 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch"
        },
        "product_reference": "kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:5.14.0-70.26.1.el9_0.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch"
        },
        "product_reference": "kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "perf-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:5.14.0-70.26.1.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
        },
        "product_reference": "python3-perf-0:5.14.0-70.26.1.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-2078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-2078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in the Linux kernel\u0027s nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-2078",
          "url": "https://www.suse.com/security/cve/CVE-2022-2078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200019 for CVE-2022-2078",
          "url": "https://bugzilla.suse.com/1200019"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200522 for CVE-2022-2078",
          "url": "https://bugzilla.suse.com/1200522"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-2078"
    },
    {
      "cve": "CVE-2022-34918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-34918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-34918",
          "url": "https://www.suse.com/security/cve/CVE-2022-34918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201171 for CVE-2022-34918",
          "url": "https://bugzilla.suse.com/1201171"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201177 for CVE-2022-34918",
          "url": "https://bugzilla.suse.com/1201177"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201222 for CVE-2022-34918",
          "url": "https://bugzilla.suse.com/1201222"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-20T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-34918"
    },
    {
      "cve": "CVE-2022-49063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-49063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: arfs: fix use-after-free when freeing @rx_cpu_rmap\n\nThe CI testing bots triggered the following splat:\n\n[  718.203054] BUG: KASAN: use-after-free in free_irq_cpu_rmap+0x53/0x80\n[  718.206349] Read of size 4 at addr ffff8881bd127e00 by task sh/20834\n[  718.212852] CPU: 28 PID: 20834 Comm: sh Kdump: loaded Tainted: G S      W IOE     5.17.0-rc8_nextqueue-devqueue-02643-g23f3121aca93 #1\n[  718.219695] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0012.070720200218 07/07/2020\n[  718.223418] Call Trace:\n[  718.227139]\n[  718.230783]  dump_stack_lvl+0x33/0x42\n[  718.234431]  print_address_description.constprop.9+0x21/0x170\n[  718.238177]  ? free_irq_cpu_rmap+0x53/0x80\n[  718.241885]  ? free_irq_cpu_rmap+0x53/0x80\n[  718.245539]  kasan_report.cold.18+0x7f/0x11b\n[  718.249197]  ? free_irq_cpu_rmap+0x53/0x80\n[  718.252852]  free_irq_cpu_rmap+0x53/0x80\n[  718.256471]  ice_free_cpu_rx_rmap.part.11+0x37/0x50 [ice]\n[  718.260174]  ice_remove_arfs+0x5f/0x70 [ice]\n[  718.263810]  ice_rebuild_arfs+0x3b/0x70 [ice]\n[  718.267419]  ice_rebuild+0x39c/0xb60 [ice]\n[  718.270974]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20\n[  718.274472]  ? ice_init_phy_user_cfg+0x360/0x360 [ice]\n[  718.278033]  ? delay_tsc+0x4a/0xb0\n[  718.281513]  ? preempt_count_sub+0x14/0xc0\n[  718.284984]  ? delay_tsc+0x8f/0xb0\n[  718.288463]  ice_do_reset+0x92/0xf0 [ice]\n[  718.292014]  ice_pci_err_resume+0x91/0xf0 [ice]\n[  718.295561]  pci_reset_function+0x53/0x80\n\u003c...\u003e\n[  718.393035] Allocated by task 690:\n[  718.433497] Freed by task 20834:\n[  718.495688] Last potentially related work creation:\n[  718.568966] The buggy address belongs to the object at ffff8881bd127e00\n                which belongs to the cache kmalloc-96 of size 96\n[  718.574085] The buggy address is located 0 bytes inside of\n                96-byte region [ffff8881bd127e00, ffff8881bd127e60)\n[  718.579265] The buggy address belongs to the page:\n[  718.598905] Memory state around the buggy address:\n[  718.601809]  ffff8881bd127d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n[  718.604796]  ffff8881bd127d80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc\n[  718.607794] \u003effff8881bd127e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n[  718.610811]                    ^\n[  718.613819]  ffff8881bd127e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc\n[  718.617107]  ffff8881bd127f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n\nThis is due to that free_irq_cpu_rmap() is always being called\n*after* (devm_)free_irq() and thus it tries to work with IRQ descs\nalready freed. For example, on device reset the driver frees the\nrmap right before allocating a new one (the splat above).\nMake rmap creation and freeing function symmetrical with\n{request,free}_irq() calls i.e. do that on ifup/ifdown instead\nof device probe/remove/resume. These operations can be performed\nindependently from the actual device aRFS configuration.\nAlso, make sure ice_vsi_free_irq() clears IRQ affinity notifiers\nonly when aRFS is disabled -- otherwise, CPU rmap sets and clears\nits own and they must not be touched manually.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-49063",
          "url": "https://www.suse.com/security/cve/CVE-2022-49063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237846 for CVE-2022-49063",
          "url": "https://bugzilla.suse.com/1237846"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-49063"
    },
    {
      "cve": "CVE-2022-49722",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-49722"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix memory corruption in VF driver\n\nDisable VF\u0027s RX/TX queues, when it\u0027s disabled. VF can have queues enabled,\nwhen it requests a reset. If PF driver assumes that VF is disabled,\nwhile VF still has queues configured, VF may unmap DMA resources.\nIn such scenario device still can map packets to memory, which ends up\nsilently corrupting it.\nPreviously, VF driver could experience memory corruption, which lead to\ncrash:\n[ 5119.170157] BUG: unable to handle kernel paging request at 00001b9780003237\n[ 5119.170166] PGD 0 P4D 0\n[ 5119.170173] Oops: 0002 [#1] PREEMPT_RT SMP PTI\n[ 5119.170181] CPU: 30 PID: 427592 Comm: kworker/u96:2 Kdump: loaded Tainted: G        W I      --------- -  - 4.18.0-372.9.1.rt7.166.el8.x86_64 #1\n[ 5119.170189] Hardware name: Dell Inc. PowerEdge R740/014X06, BIOS 2.3.10 08/15/2019\n[ 5119.170193] Workqueue: iavf iavf_adminq_task [iavf]\n[ 5119.170219] RIP: 0010:__page_frag_cache_drain+0x5/0x30\n[ 5119.170238] Code: 0f 0f b6 77 51 85 f6 74 07 31 d2 e9 05 df ff ff e9 90 fe ff ff 48 8b 05 49 db 33 01 eb b4 0f 1f 80 00 00 00 00 0f 1f 44 00 00 \u003cf0\u003e 29 77 34 74 01 c3 48 8b 07 f6 c4 80 74 0f 0f b6 77 51 85 f6 74\n[ 5119.170244] RSP: 0018:ffffa43b0bdcfd78 EFLAGS: 00010282\n[ 5119.170250] RAX: ffffffff896b3e40 RBX: ffff8fb282524000 RCX: 0000000000000002\n[ 5119.170254] RDX: 0000000049000000 RSI: 0000000000000000 RDI: 00001b9780003203\n[ 5119.170259] RBP: ffff8fb248217b00 R08: 0000000000000022 R09: 0000000000000009\n[ 5119.170262] R10: 2b849d6300000000 R11: 0000000000000020 R12: 0000000000000000\n[ 5119.170265] R13: 0000000000001000 R14: 0000000000000009 R15: 0000000000000000\n[ 5119.170269] FS:  0000000000000000(0000) GS:ffff8fb1201c0000(0000) knlGS:0000000000000000\n[ 5119.170274] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 5119.170279] CR2: 00001b9780003237 CR3: 00000008f3e1a003 CR4: 00000000007726e0\n[ 5119.170283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 5119.170286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 5119.170290] PKRU: 55555554\n[ 5119.170292] Call Trace:\n[ 5119.170298]  iavf_clean_rx_ring+0xad/0x110 [iavf]\n[ 5119.170324]  iavf_free_rx_resources+0xe/0x50 [iavf]\n[ 5119.170342]  iavf_free_all_rx_resources.part.51+0x30/0x40 [iavf]\n[ 5119.170358]  iavf_virtchnl_completion+0xd8a/0x15b0 [iavf]\n[ 5119.170377]  ? iavf_clean_arq_element+0x210/0x280 [iavf]\n[ 5119.170397]  iavf_adminq_task+0x126/0x2e0 [iavf]\n[ 5119.170416]  process_one_work+0x18f/0x420\n[ 5119.170429]  worker_thread+0x30/0x370\n[ 5119.170437]  ? process_one_work+0x420/0x420\n[ 5119.170445]  kthread+0x151/0x170\n[ 5119.170452]  ? set_kthread_struct+0x40/0x40\n[ 5119.170460]  ret_from_fork+0x35/0x40\n[ 5119.170477] Modules linked in: iavf sctp ip6_udp_tunnel udp_tunnel mlx4_en mlx4_core nfp tls vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM ipt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 nft_compat nft_counter nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache sunrpc intel_rapl_msr iTCO_wdt iTCO_vendor_support dell_smbios wmi_bmof dell_wmi_descriptor dcdbas kvm_intel kvm irqbypass intel_rapl_common isst_if_common skx_edac irdma nfit libnvdimm x86_pkg_temp_thermal i40e intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ib_uverbs rapl ipmi_ssif intel_cstate intel_uncore mei_me pcspkr acpi_ipmi ib_core mei lpc_ich i2c_i801 ipmi_si ipmi_devintf wmi ipmi_msghandler acpi_power_meter xfs libcrc32c sd_mod t10_pi sg mgag200 drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ice ahci drm libahci crc32c_intel libata tg3 megaraid_sas\n[ 5119.170613]  i2c_algo_bit dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: iavf]\n[ 5119.170627] CR2: 00001b9780003237",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
          "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
          "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-49722",
          "url": "https://www.suse.com/security/cve/CVE-2022-49722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1238301 for CVE-2022-49722",
          "url": "https://bugzilla.suse.com/1238301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:bpftool-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-abi-stablelists-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-cross-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-core-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-debug-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-devel-matched-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-doc-0:5.14.0-70.26.1.el9_0.noarch",
            "SUSE Liberty Linux 9:kernel-headers-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-modules-extra-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:kernel-tools-libs-devel-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:perf-0:5.14.0-70.26.1.el9_0.x86_64",
            "SUSE Liberty Linux 9:python3-perf-0:5.14.0-70.26.1.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-09-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-49722"
    }
  ]
}

CVE-2022-2078 (GCVE-0-2022-2078)

Vulnerability from cvelistv5 – Published: 2022-06-30 00:00 – Updated: 2024-08-03 00:24

Summary

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Severity

No CVSS data available.

CWE

CWE-121

Assigner

redhat redhat root

References

3 references

URL	Tags
https://www.debian.org/security/2022/dsa-5161	vendor-advisory
https://git.kernel.org/pub/scm/linux/kernel/git/t…
https://bugzilla.redhat.com/show_bug.cgi?id=2096178

Impacted products

1 product

Vendor	Product	Version
n/a	kernel	Affected: kernel 5.19 rc1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:24:44.192Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-5161",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5161"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2096178"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "kernel 5.19 rc1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in the Linux kernel\u0027s nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-5161",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5161"
        },
        {
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2096178"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-2078",
    "datePublished": "2022-06-30T00:00:00.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:24:44.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-34918 (GCVE-0-2022-34918)

Vulnerability from cvelistv5 – Published: 2022-07-04 20:07 – Updated: 2024-08-03 09:22

Summary

An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/n…	x_refsource_MISC
https://lore.kernel.org/netfilter-devel/cd9428b6-…	x_refsource_MISC
https://www.openwall.com/lists/oss-security/2022/…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/07/05/1	mailing-listx_refsource_MLIST
https://www.randorisec.fr/crack-linux-firewall/	x_refsource_MISC
https://www.debian.org/security/2022/dsa-5191	vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2022/08/06/5	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2022082…	x_refsource_CONFIRM
http://packetstormsecurity.com/files/168191/Kerne…	x_refsource_MISC
http://packetstormsecurity.com/files/168543/Netfi…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:22:10.749Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452%40randorisec.fr/T/#u"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2022/07/02/3"
          },
          {
            "name": "[oss-security] 20220705 Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/07/05/1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/crack-linux-firewall/"
          },
          {
            "name": "DSA-5191",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5191"
          },
          {
            "name": "[oss-security] 20220806 Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/08/06/5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220826-0004/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-28T16:06:18.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452%40randorisec.fr/T/#u"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2022/07/02/3"
        },
        {
          "name": "[oss-security] 20220705 Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/07/05/1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.randorisec.fr/crack-linux-firewall/"
        },
        {
          "name": "DSA-5191",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5191"
        },
        {
          "name": "[oss-security] 20220806 Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/08/06/5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220826-0004/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-34918",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6"
            },
            {
              "name": "https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452@randorisec.fr/T/#u",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452@randorisec.fr/T/#u"
            },
            {
              "name": "https://www.openwall.com/lists/oss-security/2022/07/02/3",
              "refsource": "MISC",
              "url": "https://www.openwall.com/lists/oss-security/2022/07/02/3"
            },
            {
              "name": "[oss-security] 20220705 Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/07/05/1"
            },
            {
              "name": "https://www.randorisec.fr/crack-linux-firewall/",
              "refsource": "MISC",
              "url": "https://www.randorisec.fr/crack-linux-firewall/"
            },
            {
              "name": "DSA-5191",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5191"
            },
            {
              "name": "[oss-security] 20220806 Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/08/06/5"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220826-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220826-0004/"
            },
            {
              "name": "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-34918",
    "datePublished": "2022-07-04T20:07:32.000Z",
    "dateReserved": "2022-07-04T00:00:00.000Z",
    "dateUpdated": "2024-08-03T09:22:10.749Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-49063 (GCVE-0-2022-49063)

Vulnerability from cvelistv5 – Published: 2025-02-26 01:54 – Updated: 2026-05-11 18:52

Title

ice: arfs: fix use-after-free when freeing @rx_cpu_rmap

Summary

In the Linux kernel, the following vulnerability has been resolved: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap The CI testing bots triggered the following splat: [ 718.203054] BUG: KASAN: use-after-free in free_irq_cpu_rmap+0x53/0x80 [ 718.206349] Read of size 4 at addr ffff8881bd127e00 by task sh/20834 [ 718.212852] CPU: 28 PID: 20834 Comm: sh Kdump: loaded Tainted: G S W IOE 5.17.0-rc8_nextqueue-devqueue-02643-g23f3121aca93 #1 [ 718.219695] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0012.070720200218 07/07/2020 [ 718.223418] Call Trace: [ 718.227139] [ 718.230783] dump_stack_lvl+0x33/0x42 [ 718.234431] print_address_description.constprop.9+0x21/0x170 [ 718.238177] ? free_irq_cpu_rmap+0x53/0x80 [ 718.241885] ? free_irq_cpu_rmap+0x53/0x80 [ 718.245539] kasan_report.cold.18+0x7f/0x11b [ 718.249197] ? free_irq_cpu_rmap+0x53/0x80 [ 718.252852] free_irq_cpu_rmap+0x53/0x80 [ 718.256471] ice_free_cpu_rx_rmap.part.11+0x37/0x50 [ice] [ 718.260174] ice_remove_arfs+0x5f/0x70 [ice] [ 718.263810] ice_rebuild_arfs+0x3b/0x70 [ice] [ 718.267419] ice_rebuild+0x39c/0xb60 [ice] [ 718.270974] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 718.274472] ? ice_init_phy_user_cfg+0x360/0x360 [ice] [ 718.278033] ? delay_tsc+0x4a/0xb0 [ 718.281513] ? preempt_count_sub+0x14/0xc0 [ 718.284984] ? delay_tsc+0x8f/0xb0 [ 718.288463] ice_do_reset+0x92/0xf0 [ice] [ 718.292014] ice_pci_err_resume+0x91/0xf0 [ice] [ 718.295561] pci_reset_function+0x53/0x80 <...> [ 718.393035] Allocated by task 690: [ 718.433497] Freed by task 20834: [ 718.495688] Last potentially related work creation: [ 718.568966] The buggy address belongs to the object at ffff8881bd127e00 which belongs to the cache kmalloc-96 of size 96 [ 718.574085] The buggy address is located 0 bytes inside of 96-byte region [ffff8881bd127e00, ffff8881bd127e60) [ 718.579265] The buggy address belongs to the page: [ 718.598905] Memory state around the buggy address: [ 718.601809] ffff8881bd127d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 718.604796] ffff8881bd127d80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 718.607794] >ffff8881bd127e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 718.610811] ^ [ 718.613819] ffff8881bd127e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 718.617107] ffff8881bd127f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc This is due to that free_irq_cpu_rmap() is always being called *after* (devm_)free_irq() and thus it tries to work with IRQ descs already freed. For example, on device reset the driver frees the rmap right before allocating a new one (the splat above). Make rmap creation and freeing function symmetrical with {request,free}_irq() calls i.e. do that on ifup/ifdown instead of device probe/remove/resume. These operations can be performed independently from the actual device aRFS configuration. Also, make sure ice_vsi_free_irq() clears IRQ affinity notifiers only when aRFS is disabled -- otherwise, CPU rmap sets and clears its own and they must not be touched manually.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-27 18:17 UTC

CWE

CWE-416 - Use After Free

Assigner

Linux mitre root

References

5 references

URL	Tags
https://git.kernel.org/stable/c/ba2f6ec28733fb6b2…
https://git.kernel.org/stable/c/618df75f2e30c7838…
https://git.kernel.org/stable/c/d08d2fb6d99d82da1…
https://git.kernel.org/stable/c/d7442f512b71fc63a…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 28bf26724fdb0e02267d19e280d6717ee810a10d , < ba2f6ec28733fb6b24ed086e676df3df4c138f3f (git) Affected: 28bf26724fdb0e02267d19e280d6717ee810a10d , < 618df75f2e30c7838a3e010ca32cd4893ec9fe33 (git) Affected: 28bf26724fdb0e02267d19e280d6717ee810a10d , < d08d2fb6d99d82da1c63aba5c0d1c6f237e150f3 (git) Affected: 28bf26724fdb0e02267d19e280d6717ee810a10d , < d7442f512b71fc63a99c8a801422dde4fbbf9f93 (git)
Linux	Linux	Affected: 5.8 Unaffected: 0 , < 5.8 (semver) Unaffected: 5.10.238 , ≤ 5.10.* (semver) Unaffected: 5.15.184 , ≤ 5.15.* (semver) Unaffected: 5.17.4 , ≤ 5.17.* (semver) Unaffected: 5.18 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-49063",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-27T18:17:43.737630Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-27T18:22:35.691Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:31:01.995Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/ice/ice_arfs.c",
            "drivers/net/ethernet/intel/ice/ice_lib.c",
            "drivers/net/ethernet/intel/ice/ice_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ba2f6ec28733fb6b24ed086e676df3df4c138f3f",
              "status": "affected",
              "version": "28bf26724fdb0e02267d19e280d6717ee810a10d",
              "versionType": "git"
            },
            {
              "lessThan": "618df75f2e30c7838a3e010ca32cd4893ec9fe33",
              "status": "affected",
              "version": "28bf26724fdb0e02267d19e280d6717ee810a10d",
              "versionType": "git"
            },
            {
              "lessThan": "d08d2fb6d99d82da1c63aba5c0d1c6f237e150f3",
              "status": "affected",
              "version": "28bf26724fdb0e02267d19e280d6717ee810a10d",
              "versionType": "git"
            },
            {
              "lessThan": "d7442f512b71fc63a99c8a801422dde4fbbf9f93",
              "status": "affected",
              "version": "28bf26724fdb0e02267d19e280d6717ee810a10d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/ice/ice_arfs.c",
            "drivers/net/ethernet/intel/ice/ice_lib.c",
            "drivers/net/ethernet/intel/ice/ice_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.8"
            },
            {
              "lessThan": "5.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.238",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.184",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.4",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: arfs: fix use-after-free when freeing @rx_cpu_rmap\n\nThe CI testing bots triggered the following splat:\n\n[  718.203054] BUG: KASAN: use-after-free in free_irq_cpu_rmap+0x53/0x80\n[  718.206349] Read of size 4 at addr ffff8881bd127e00 by task sh/20834\n[  718.212852] CPU: 28 PID: 20834 Comm: sh Kdump: loaded Tainted: G S      W IOE     5.17.0-rc8_nextqueue-devqueue-02643-g23f3121aca93 #1\n[  718.219695] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0012.070720200218 07/07/2020\n[  718.223418] Call Trace:\n[  718.227139]\n[  718.230783]  dump_stack_lvl+0x33/0x42\n[  718.234431]  print_address_description.constprop.9+0x21/0x170\n[  718.238177]  ? free_irq_cpu_rmap+0x53/0x80\n[  718.241885]  ? free_irq_cpu_rmap+0x53/0x80\n[  718.245539]  kasan_report.cold.18+0x7f/0x11b\n[  718.249197]  ? free_irq_cpu_rmap+0x53/0x80\n[  718.252852]  free_irq_cpu_rmap+0x53/0x80\n[  718.256471]  ice_free_cpu_rx_rmap.part.11+0x37/0x50 [ice]\n[  718.260174]  ice_remove_arfs+0x5f/0x70 [ice]\n[  718.263810]  ice_rebuild_arfs+0x3b/0x70 [ice]\n[  718.267419]  ice_rebuild+0x39c/0xb60 [ice]\n[  718.270974]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20\n[  718.274472]  ? ice_init_phy_user_cfg+0x360/0x360 [ice]\n[  718.278033]  ? delay_tsc+0x4a/0xb0\n[  718.281513]  ? preempt_count_sub+0x14/0xc0\n[  718.284984]  ? delay_tsc+0x8f/0xb0\n[  718.288463]  ice_do_reset+0x92/0xf0 [ice]\n[  718.292014]  ice_pci_err_resume+0x91/0xf0 [ice]\n[  718.295561]  pci_reset_function+0x53/0x80\n\u003c...\u003e\n[  718.393035] Allocated by task 690:\n[  718.433497] Freed by task 20834:\n[  718.495688] Last potentially related work creation:\n[  718.568966] The buggy address belongs to the object at ffff8881bd127e00\n                which belongs to the cache kmalloc-96 of size 96\n[  718.574085] The buggy address is located 0 bytes inside of\n                96-byte region [ffff8881bd127e00, ffff8881bd127e60)\n[  718.579265] The buggy address belongs to the page:\n[  718.598905] Memory state around the buggy address:\n[  718.601809]  ffff8881bd127d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n[  718.604796]  ffff8881bd127d80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc\n[  718.607794] \u003effff8881bd127e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n[  718.610811]                    ^\n[  718.613819]  ffff8881bd127e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc\n[  718.617107]  ffff8881bd127f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n\nThis is due to that free_irq_cpu_rmap() is always being called\n*after* (devm_)free_irq() and thus it tries to work with IRQ descs\nalready freed. For example, on device reset the driver frees the\nrmap right before allocating a new one (the splat above).\nMake rmap creation and freeing function symmetrical with\n{request,free}_irq() calls i.e. do that on ifup/ifdown instead\nof device probe/remove/resume. These operations can be performed\nindependently from the actual device aRFS configuration.\nAlso, make sure ice_vsi_free_irq() clears IRQ affinity notifiers\nonly when aRFS is disabled -- otherwise, CPU rmap sets and clears\nits own and they must not be touched manually."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:52:18.679Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ba2f6ec28733fb6b24ed086e676df3df4c138f3f"
        },
        {
          "url": "https://git.kernel.org/stable/c/618df75f2e30c7838a3e010ca32cd4893ec9fe33"
        },
        {
          "url": "https://git.kernel.org/stable/c/d08d2fb6d99d82da1c63aba5c0d1c6f237e150f3"
        },
        {
          "url": "https://git.kernel.org/stable/c/d7442f512b71fc63a99c8a801422dde4fbbf9f93"
        }
      ],
      "title": "ice: arfs: fix use-after-free when freeing @rx_cpu_rmap",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49063",
    "datePublished": "2025-02-26T01:54:32.460Z",
    "dateReserved": "2025-02-26T01:49:39.244Z",
    "dateUpdated": "2026-05-11T18:52:18.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-49722 (GCVE-0-2022-49722)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:24 – Updated: 2026-08-05 08:56

Title

ice: Fix memory corruption in VF driver

Summary

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, when it's disabled. VF can have queues enabled, when it requests a reset. If PF driver assumes that VF is disabled, while VF still has queues configured, VF may unmap DMA resources. In such scenario device still can map packets to memory, which ends up silently corrupting it. Previously, VF driver could experience memory corruption, which lead to crash: [ 5119.170157] BUG: unable to handle kernel paging request at 00001b9780003237 [ 5119.170166] PGD 0 P4D 0 [ 5119.170173] Oops: 0002 [#1] PREEMPT_RT SMP PTI [ 5119.170181] CPU: 30 PID: 427592 Comm: kworker/u96:2 Kdump: loaded Tainted: G W I --------- - - 4.18.0-372.9.1.rt7.166.el8.x86_64 #1 [ 5119.170189] Hardware name: Dell Inc. PowerEdge R740/014X06, BIOS 2.3.10 08/15/2019 [ 5119.170193] Workqueue: iavf iavf_adminq_task [iavf] [ 5119.170219] RIP: 0010:__page_frag_cache_drain+0x5/0x30 [ 5119.170238] Code: 0f 0f b6 77 51 85 f6 74 07 31 d2 e9 05 df ff ff e9 90 fe ff ff 48 8b 05 49 db 33 01 eb b4 0f 1f 80 00 00 00 00 0f 1f 44 00 00 <f0> 29 77 34 74 01 c3 48 8b 07 f6 c4 80 74 0f 0f b6 77 51 85 f6 74 [ 5119.170244] RSP: 0018:ffffa43b0bdcfd78 EFLAGS: 00010282 [ 5119.170250] RAX: ffffffff896b3e40 RBX: ffff8fb282524000 RCX: 0000000000000002 [ 5119.170254] RDX: 0000000049000000 RSI: 0000000000000000 RDI: 00001b9780003203 [ 5119.170259] RBP: ffff8fb248217b00 R08: 0000000000000022 R09: 0000000000000009 [ 5119.170262] R10: 2b849d6300000000 R11: 0000000000000020 R12: 0000000000000000 [ 5119.170265] R13: 0000000000001000 R14: 0000000000000009 R15: 0000000000000000 [ 5119.170269] FS: 0000000000000000(0000) GS:ffff8fb1201c0000(0000) knlGS:0000000000000000 [ 5119.170274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 5119.170279] CR2: 00001b9780003237 CR3: 00000008f3e1a003 CR4: 00000000007726e0 [ 5119.170283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 5119.170286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 5119.170290] PKRU: 55555554 [ 5119.170292] Call Trace: [ 5119.170298] iavf_clean_rx_ring+0xad/0x110 [iavf] [ 5119.170324] iavf_free_rx_resources+0xe/0x50 [iavf] [ 5119.170342] iavf_free_all_rx_resources.part.51+0x30/0x40 [iavf] [ 5119.170358] iavf_virtchnl_completion+0xd8a/0x15b0 [iavf] [ 5119.170377] ? iavf_clean_arq_element+0x210/0x280 [iavf] [ 5119.170397] iavf_adminq_task+0x126/0x2e0 [iavf] [ 5119.170416] process_one_work+0x18f/0x420 [ 5119.170429] worker_thread+0x30/0x370 [ 5119.170437] ? process_one_work+0x420/0x420 [ 5119.170445] kthread+0x151/0x170 [ 5119.170452] ? set_kthread_struct+0x40/0x40 [ 5119.170460] ret_from_fork+0x35/0x40 [ 5119.170477] Modules linked in: iavf sctp ip6_udp_tunnel udp_tunnel mlx4_en mlx4_core nfp tls vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM ipt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 nft_compat nft_counter nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache sunrpc intel_rapl_msr iTCO_wdt iTCO_vendor_support dell_smbios wmi_bmof dell_wmi_descriptor dcdbas kvm_intel kvm irqbypass intel_rapl_common isst_if_common skx_edac irdma nfit libnvdimm x86_pkg_temp_thermal i40e intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ib_uverbs rapl ipmi_ssif intel_cstate intel_uncore mei_me pcspkr acpi_ipmi ib_core mei lpc_ich i2c_i801 ipmi_si ipmi_devintf wmi ipmi_msghandler acpi_power_meter xfs libcrc32c sd_mod t10_pi sg mgag200 drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ice ahci drm libahci crc32c_intel libata tg3 megaraid_sas [ 5119.170613] i2c_algo_bit dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: iavf] [ 5119.170627] CR2: 00001b9780003237

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

2 references

URL	Tags
https://git.kernel.org/stable/c/1bb8253b1dd44cf00…
https://git.kernel.org/stable/c/efe41860008e57fb6…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: ec4f5a436bdf0e5453ad15c4f34a59b9b675ff48 , < 1bb8253b1dd44cf004e12c333acc6f25ee286cf3 (git) Affected: ec4f5a436bdf0e5453ad15c4f34a59b9b675ff48 , < efe41860008e57fb6b69855b4b93fdf34bc42798 (git)
Linux	Linux	Affected: 5.5 Unaffected: 0 , < 5.5 (semver) Unaffected: 5.18.6 , ≤ 5.18.* (semver) Unaffected: 5.19 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/ice/ice_vf_lib.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1bb8253b1dd44cf004e12c333acc6f25ee286cf3",
              "status": "affected",
              "version": "ec4f5a436bdf0e5453ad15c4f34a59b9b675ff48",
              "versionType": "git"
            },
            {
              "lessThan": "efe41860008e57fb6b69855b4b93fdf34bc42798",
              "status": "affected",
              "version": "ec4f5a436bdf0e5453ad15c4f34a59b9b675ff48",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/ice/ice_vf_lib.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "lessThan": "5.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.6",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix memory corruption in VF driver\n\nDisable VF\u0027s RX/TX queues, when it\u0027s disabled. VF can have queues enabled,\nwhen it requests a reset. If PF driver assumes that VF is disabled,\nwhile VF still has queues configured, VF may unmap DMA resources.\nIn such scenario device still can map packets to memory, which ends up\nsilently corrupting it.\nPreviously, VF driver could experience memory corruption, which lead to\ncrash:\n[ 5119.170157] BUG: unable to handle kernel paging request at 00001b9780003237\n[ 5119.170166] PGD 0 P4D 0\n[ 5119.170173] Oops: 0002 [#1] PREEMPT_RT SMP PTI\n[ 5119.170181] CPU: 30 PID: 427592 Comm: kworker/u96:2 Kdump: loaded Tainted: G        W I      --------- -  - 4.18.0-372.9.1.rt7.166.el8.x86_64 #1\n[ 5119.170189] Hardware name: Dell Inc. PowerEdge R740/014X06, BIOS 2.3.10 08/15/2019\n[ 5119.170193] Workqueue: iavf iavf_adminq_task [iavf]\n[ 5119.170219] RIP: 0010:__page_frag_cache_drain+0x5/0x30\n[ 5119.170238] Code: 0f 0f b6 77 51 85 f6 74 07 31 d2 e9 05 df ff ff e9 90 fe ff ff 48 8b 05 49 db 33 01 eb b4 0f 1f 80 00 00 00 00 0f 1f 44 00 00 \u003cf0\u003e 29 77 34 74 01 c3 48 8b 07 f6 c4 80 74 0f 0f b6 77 51 85 f6 74\n[ 5119.170244] RSP: 0018:ffffa43b0bdcfd78 EFLAGS: 00010282\n[ 5119.170250] RAX: ffffffff896b3e40 RBX: ffff8fb282524000 RCX: 0000000000000002\n[ 5119.170254] RDX: 0000000049000000 RSI: 0000000000000000 RDI: 00001b9780003203\n[ 5119.170259] RBP: ffff8fb248217b00 R08: 0000000000000022 R09: 0000000000000009\n[ 5119.170262] R10: 2b849d6300000000 R11: 0000000000000020 R12: 0000000000000000\n[ 5119.170265] R13: 0000000000001000 R14: 0000000000000009 R15: 0000000000000000\n[ 5119.170269] FS:  0000000000000000(0000) GS:ffff8fb1201c0000(0000) knlGS:0000000000000000\n[ 5119.170274] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 5119.170279] CR2: 00001b9780003237 CR3: 00000008f3e1a003 CR4: 00000000007726e0\n[ 5119.170283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 5119.170286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 5119.170290] PKRU: 55555554\n[ 5119.170292] Call Trace:\n[ 5119.170298]  iavf_clean_rx_ring+0xad/0x110 [iavf]\n[ 5119.170324]  iavf_free_rx_resources+0xe/0x50 [iavf]\n[ 5119.170342]  iavf_free_all_rx_resources.part.51+0x30/0x40 [iavf]\n[ 5119.170358]  iavf_virtchnl_completion+0xd8a/0x15b0 [iavf]\n[ 5119.170377]  ? iavf_clean_arq_element+0x210/0x280 [iavf]\n[ 5119.170397]  iavf_adminq_task+0x126/0x2e0 [iavf]\n[ 5119.170416]  process_one_work+0x18f/0x420\n[ 5119.170429]  worker_thread+0x30/0x370\n[ 5119.170437]  ? process_one_work+0x420/0x420\n[ 5119.170445]  kthread+0x151/0x170\n[ 5119.170452]  ? set_kthread_struct+0x40/0x40\n[ 5119.170460]  ret_from_fork+0x35/0x40\n[ 5119.170477] Modules linked in: iavf sctp ip6_udp_tunnel udp_tunnel mlx4_en mlx4_core nfp tls vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM ipt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 nft_compat nft_counter nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache sunrpc intel_rapl_msr iTCO_wdt iTCO_vendor_support dell_smbios wmi_bmof dell_wmi_descriptor dcdbas kvm_intel kvm irqbypass intel_rapl_common isst_if_common skx_edac irdma nfit libnvdimm x86_pkg_temp_thermal i40e intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ib_uverbs rapl ipmi_ssif intel_cstate intel_uncore mei_me pcspkr acpi_ipmi ib_core mei lpc_ich i2c_i801 ipmi_si ipmi_devintf wmi ipmi_msghandler acpi_power_meter xfs libcrc32c sd_mod t10_pi sg mgag200 drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ice ahci drm libahci crc32c_intel libata tg3 megaraid_sas\n[ 5119.170613]  i2c_algo_bit dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: iavf]\n[ 5119.170627] CR2: 00001b9780003237"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The defect is in the local Intel ice PF SR-IOV path (ice_reset_vf via virtchnl VIRTCHNL_OP_RESET_VF, VFLR, or host VF lifecycle), not in remote packet parsing; network RX only supplies DMA traffic after the local mis-reset.\nAC:L - A VF tenant can drive reset/VFLR/queue teardown while the PF has the VF marked disabled with queues still live; the iavf \u201cNever saw reset\u201d path then frees DMA deterministically, so success does not depend on conditions outside attacker influence.\nPR:L - In the worst reasonable deployment an SR-IOV VF is assigned to a guest or delegated container; that tenant can issue virtchnl reset/VFLR against the host ice driver without host CAP_NET_ADMIN or init-namespace root.\nUI:N - The attacker initiates VF reset/disable and subsequent DMA unmap themselves; no separate victim action such as mounting a filesystem or opening a crafted file is required.\nS:U - Corruption lands in the VF driver\u2019s (iavf) kernel DMA/page state within the same OS security authority; this is local kernel memory corruption, not a guest-to-host escape or IOMMU boundary bypass.\nC:H - Hardware continues DMA into unmapped/freed RX pages, silently corrupting reclaimed kernel memory and yielding a high-impact disclosure primitive consistent with DMA-after-free/UAF scoring.\nI:H - The same DMA-into-freed-buffers condition is attacker-reachable memory corruption that can overwrite reclaimed kernel objects, enabling integrity compromise and control-flow hijack primitives.\nA:H - The commit documents a kernel paging oops in iavf_clean_rx_ring/__page_frag_cache_drain from the corrupted page state; any such kernel crash scores Availability High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:56:06.913Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1bb8253b1dd44cf004e12c333acc6f25ee286cf3"
        },
        {
          "url": "https://git.kernel.org/stable/c/efe41860008e57fb6b69855b4b93fdf34bc42798"
        }
      ],
      "title": "ice: Fix memory corruption in VF driver",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49722",
    "datePublished": "2025-02-26T02:24:35.357Z",
    "dateReserved": "2025-02-26T02:21:30.446Z",
    "dateUpdated": "2026-08-05T08:56:06.913Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2022:6610

CVE-2022-2078 (GCVE-0-2022-2078)

CVE-2022-34918 (GCVE-0-2022-34918)

CVE-2022-49063 (GCVE-0-2022-49063)

CVE-2022-49722 (GCVE-0-2022-49722)

Tags

Sightings

Nomenclature

Related by attack behaviour