Critical Error Handling Vulnerability in Linux Kernel (CVE-2022-49193)
Summary
CVE-2022-49193: In the Linux kernel, the following vulnerability has been resolved: ice: fix 'scheduling while atomic' on aux critical err interrupt There's a kernel BUG splat on processing aux critical error interrupts in ice_misc_intr... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management, process scheduling, and system security. It is widely used in various environments, from servers to embedded systems. The vulnerability CVE-2022-49193 affects the 'ice' driver, which is responsible for managing Intel Ethernet devices. This vulnerability can lead to system instability when handling auxiliary critical errors.
Vulnerability Detail
CVE-2022-49193 is a vulnerability in the Linux kernel's 'ice' driver that arises from improper handling of auxiliary critical error interrupts. When these interrupts occur, the system may encounter a 'scheduling while atomic' bug, leading to potential kernel crashes and system instability. The vulnerability is rooted in the call sequence within the interrupt handling code, where a mutex lock is attempted in a context that does not allow sleeping, resulting in a kernel panic.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
CVE-2022-49193 is a critical vulnerability in the Linux kernel that can lead to system crashes due to improper handling of error interrupts. It is essential for users of affected systems to update their kernel to the patched version to ensure stability and security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49193 is a vulnerability in the Linux kernel's 'ice' driver that can cause kernel crashes when handling auxiliary critical error interrupts.
This vulnerability can lead to system instability and crashes, particularly in environments using Intel Ethernet devices managed by the 'ice' driver.
You should update your Linux kernel to version 5.17.3-1 or later to mitigate the vulnerability.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time using just a manifest file like package-lock.json.
You can check if your application is affected by using the Vulert playground at Vulert Scanner without requiring signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
