CVE-2022-49722

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix memory corruption in VF driver

Disable VF's RX/TX queues, when it's disabled. VF can have queues enabled,

when it requests a reset. If PF driver assumes that VF is disabled,

while VF still has queues configured, VF may unmap DMA resources.

In such scenario device still can map packets to memory, which ends up

silently corrupting it.

Previously, VF driver could experience memory corruption, which lead to

crash:

[ 5119.170157] BUG: unable to handle kernel paging request at 00001b9780003237

[ 5119.170166] PGD 0 P4D 0

[ 5119.170173] Oops: 0002 [#1] PREEMPT_RT SMP PTI

[ 5119.170181] CPU: 30 PID: 427592 Comm: kworker/u96:2 Kdump: loaded Tainted: G W I --------- - - 4.18.0-372.9.1.rt7.166.el8.x86_64 #1

[ 5119.170189] Hardware name: Dell Inc. PowerEdge R740/014X06, BIOS 2.3.10 08/15/2019

[ 5119.170193] Workqueue: iavf iavf_adminq_task [iavf]

[ 5119.170219] RIP: 0010:__page_frag_cache_drain+0x5/0x30

[ 51

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References