Kernel Crash Vulnerability in Linux Packages Due to TSN Feature Misconfiguration
Summary
CVE-2022-48645: In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC (taprio, cbs, gate, police) are configured through a mix of... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management, process scheduling, and system security. It supports a wide range of functionalities, including networking, file systems, and device drivers. The vulnerability in question affects the ENETC (Enhanced Network Traffic Controller) component, specifically concerning the configuration of Time-Sensitive Networking (TSN) features on Virtual Functions (VFs). This misconfiguration can lead to kernel crashes, impacting system stability and performance.
Vulnerability Detail
The vulnerability arises from the improper handling of TSN features on the ENETC, which are configured through command BD ring messages and port registers. These port registers are only accessible from the PCIe Physical Function (PF) and not from the Virtual Functions (VF). When a VF attempts to access these registers, it results in a kernel crash, leading to a denial of service. The crash occurs due to an inability to handle kernel paging requests, which can disrupt network operations and compromise system reliability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid configuring TSN features on Virtual Functions until the kernel is updated. This can be done by ensuring that any commands related to TSN configuration are directed solely to the Physical Function.
Conclusion
The CVE-2022-48645 vulnerability in the Linux kernel poses a significant risk by allowing kernel crashes through misconfigured TSN features on Virtual Functions. Users are encouraged to update their systems to the latest kernel version to mitigate this risk and ensure system stability. Utilizing tools like Vulert can help in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to kernel crashes when TSN features are misconfigured on Virtual Functions, resulting in system instability and potential denial of service.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The vulnerability affects all versions of the Linux kernel prior to 6.0.2-1. Users are advised to upgrade to this version or later.
Yes, the permanent fix involves updating the Linux kernel to version 6.0.2-1 or later, which includes modifications to prevent the kernel crashes.
If an immediate update is not possible, avoid configuring TSN features on Virtual Functions as a temporary workaround until you can apply the necessary updates.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
