Null VSI Call Trace Vulnerability in Linux Kernel's Ice Driver
Summary
CVE-2022-50041: In the Linux kernel, the following vulnerability has been resolved: ice: Fix call trace with null VSI during VF reset During stress test with attaching and detaching VF from KVM and simultaneously changing VFs spoofcheck... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services and hardware interaction. The Ice driver is specifically designed for Intel Ethernet devices, enabling efficient network communication. This driver is crucial for managing Virtual Functions (VFs) in virtualized environments, such as KVM. The vulnerability in question arises during stress testing scenarios where VFs are frequently attached and detached, leading to potential system instability.
Vulnerability Detail
The vulnerability, identified as CVE-2022-50041, occurs in the Ice driver when a Virtual Function's Virtual Station Interface (VSI) is null during a reset operation. This situation can lead to a call trace warning, indicating that the driver attempts to reset a VF that has already been removed. Although the driver continues to function despite this warning, it can cause unnecessary log clutter and may obscure other critical issues. The root cause is a WARN_ON() check that triggers when the VSI is null, which is unnecessary if the VF has already been disabled.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can monitor their systems for any unusual behavior during VF operations and ensure that they are using the latest kernel version.
Conclusion
The CVE-2022-50041 vulnerability in the Ice driver of the Linux kernel poses a risk of unnecessary call traces during Virtual Function resets. Users are encouraged to update to the latest kernel version to mitigate this issue and maintain system stability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-50041 is a vulnerability in the Ice driver of the Linux kernel that can lead to unnecessary call traces when a Virtual Function's VSI is null during a reset.
While the system continues to operate, the vulnerability can generate excessive log warnings, making it difficult to identify other potential issues.
Yes, a patch is available in the Linux kernel version 6.0.2-1 and later. Users are advised to update their systems.
While there are no specific workarounds, it is recommended to monitor your system closely for any unusual behavior related to Virtual Functions.
You can use Vulert, which monitors open-source vulnerabilities in real-time. By simply uploading your manifest file, you can check for vulnerabilities without needing to install any software.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
