Kernel Warning Issue in Linux Package Due to RX Ring Parameter Modification
Summary
CVE-2022-49227: In the Linux kernel, the following vulnerability has been resolved: igc: avoid kernel warning when changing RX ring parameters Calling ethtool changing the RX ring parameters like this: $ ethtool -G eth0 rx 1024 on igc t... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and flexibility, supporting a wide range of hardware architectures. The igc driver, part of the Linux kernel, manages Intel Ethernet controllers, allowing for efficient network communication. However, a recent vulnerability has been identified that can lead to kernel warnings when modifying RX ring parameters, potentially affecting system stability.
Vulnerability Detail
The vulnerability arises in the igc driver when users attempt to change the RX ring parameters using the ethtool command. Specifically, the function igc_ethtool_set_ringparam() fails to reset the xdp_rxq_info member before invoking igc_setup_rx_resources(). This oversight leads to the registration of an already existing xdp_rxq_info structure, triggering kernel warnings and indicating a missing unregister process. If exploited, this could result in system instability and degraded network performance.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid changing RX ring parameters using the ethtool command until the package is updated. This can prevent the kernel warnings from occurring.
Conclusion
In summary, the vulnerability identified in the Linux kernel's igc driver poses a risk of kernel warnings and system instability when modifying RX ring parameters. Users are advised to update to the patched version to mitigate this issue and can utilize Vulert for real-time monitoring of open-source vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to kernel warnings and potential system instability when modifying RX ring parameters.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patch is available in version 5.17.3-1 of the Linux package.
As a temporary measure, refrain from changing RX ring parameters using ethtool until you can apply the update.
Detailed information can be found in the CVE database or by visiting the official Linux kernel documentation.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
