Bug 2363470 (CVE-2022-49858) - CVE-2022-49858 kernel: octeontx2-pf: Fix SQE threshold checking
Summary: CVE-2022-49858 kernel: octeontx2-pf: Fix SQE threshold checking
Keywords:
Status: NEW
Alias: CVE-2022-49858
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-01 15:05 UTC by OSIDB Bzimport
Modified: 2025-06-06 01:53 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-05-01 15:05:56 UTC
In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: Fix SQE threshold checking

Current way of checking available SQE count which is based on
HW updated SQB count could result in driver submitting an SQE
even before CQE for the previously transmitted SQE at the same
index is processed in NAPI resulting losing SKB pointers,
hence a leak. Fix this by checking a consumer index which
is updated once CQE is processed.

Comment 1 Avinash Hanwate 2025-05-02 06:20:45 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025050146-CVE-2022-49858-a1ee@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.