CVE-2022-49201

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49201
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49201.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49201
Downstream
Related
Published
2025-02-26T01:55:43Z
Modified
2025-10-21T09:36:55.817089Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ibmvnic: fix race between xmit and reset
Details

In the Linux kernel, the following vulnerability has been resolved:

ibmvnic: fix race between xmit and reset

There is a race between reset and the transmit paths that can lead to ibmvnic_xmit() accessing an scrq after it has been freed in the reset path. It can result in a crash like:

Kernel attempted to read user page (0) - exploit attempt? (uid: 0)
BUG: Kernel NULL pointer dereference on read at 0x00000000
Faulting instruction address: 0xc0080000016189f8
Oops: Kernel access of bad area, sig: 11 [#1]
...
NIP [c0080000016189f8] ibmvnic_xmit+0x60/0xb60 [ibmvnic]
LR [c000000000c0046c] dev_hard_start_xmit+0x11c/0x280
Call Trace:
[c008000001618f08] ibmvnic_xmit+0x570/0xb60 [ibmvnic] (unreliable)
[c000000000c0046c] dev_hard_start_xmit+0x11c/0x280
[c000000000c9cfcc] sch_direct_xmit+0xec/0x330
[c000000000bfe640] __dev_xmit_skb+0x3a0/0x9d0
[c000000000c00ad4] __dev_queue_xmit+0x394/0x730
[c008000002db813c] __bond_start_xmit+0x254/0x450 [bonding]
[c008000002db8378] bond_start_xmit+0x40/0xc0 [bonding]
[c000000000c0046c] dev_hard_start_xmit+0x11c/0x280
[c000000000c00ca4] __dev_queue_xmit+0x564/0x730
[c000000000cf97e0] neigh_hh_output+0xd0/0x180
[c000000000cfa69c] ip_finish_output2+0x31c/0x5c0
[c000000000cfd244] __ip_queue_xmit+0x194/0x4f0
[c000000000d2a3c4] __tcp_transmit_skb+0x434/0x9b0
[c000000000d2d1e0] __tcp_retransmit_skb+0x1d0/0x6a0
[c000000000d2d984] tcp_retransmit_skb+0x34/0x130
[c000000000d310e8] tcp_retransmit_timer+0x388/0x6d0
[c000000000d315ec] tcp_write_timer_handler+0x1bc/0x330
[c000000000d317bc] tcp_write_timer+0x5c/0x200
[c000000000243270] call_timer_fn+0x50/0x1c0
[c000000000243704] __run_timers.part.0+0x324/0x460
[c000000000243894] run_timer_softirq+0x54/0xa0
[c000000000ea713c] __do_softirq+0x15c/0x3e0
[c000000000166258] __irq_exit_rcu+0x158/0x190
[c000000000166420] irq_exit+0x20/0x40
[c00000000002853c] timer_interrupt+0x14c/0x2b0
[c000000000009a00] decrementer_common_virt+0x210/0x220
--- interrupt: 900 at plpar_hcall_norets_notrace+0x18/0x2c

The immediate cause of the crash is the access of txscrq in the following snippet during a reset, where the txscrq can be either NULL or an address that will soon be invalid:

ibmvnic_xmit()
{
    ...
    tx_scrq = adapter->tx_scrq[queue_num];
    txq = netdev_get_tx_queue(netdev, queue_num);
    ind_bufp = &tx_scrq->ind_buf;

    if (test_bit(0, &adapter->resetting)) {
    ...
}

But beyond that, the call to ibmvnicxmit() itself is not safe during a reset and the reset path attempts to avoid this by stopping the queue in ibmvniccleanup(). However just after the queue was stopped, an in-flight ibmvniccompletetx() could have restarted the queue even as the reset is progressing.

Since the queue was restarted we could get a call to ibmvnicxmit() which can then access the bad txscrq (or other fields).

We cannot however simply have ibmvniccompletetx() check the ->resetting bit and skip starting the queue. This can race at the "back-end" of a good reset which just restarted the queue but has not cleared the ->resetting bit yet. If we skip restarting the queue due to ->resetting being true, the queue would remain stopped indefinitely potentially leading to transmit timeouts.

IOW ->resetting is too broad for this purpose. Instead use a new flag that indicates whether or not the queues are active. Only the open/ reset paths control when the queues are active. ibmvniccompletetx() and others wake up the queue only if the queue is marked active.

So we will have: A. reset/open thread in ibmvniccleanup() and _ibmvnic_open()

    ->resetting = true
    ->tx_queues_active = false
    disable tx queues
    ...
    ->tx_queues_active = true
    start tx queues

B. Tx interrupt in ibmvnic_complete_tx():

    if (->tx_queues_active)
        netif_wake_subqueue();

To ensure that ->txqueuesactive and state of the queues are consistent, we need a lock which:

- must also be taken in the interrupt path (ibmvnic_complete_tx())
- shared across the multiple

---truncated---

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7ed5b31f4a6695a21f617df07646e9b15c6c1d29
Fixed
1bd58abf595b6cf1ba6dd47ec887c4c009155fc9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7ed5b31f4a6695a21f617df07646e9b15c6c1d29
Fixed
475f9cce98b63bc145b4efa66fa51175d4cb345f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7ed5b31f4a6695a21f617df07646e9b15c6c1d29
Fixed
8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7ed5b31f4a6695a21f617df07646e9b15c6c1d29
Fixed
4219196d1f662cb10a462eb9e076633a3fc31a15

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.4
v5.15.5
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.16.1
v5.16.10
v5.16.11
v5.16.12
v5.16.13
v5.16.14
v5.16.15
v5.16.16
v5.16.17
v5.16.18
v5.16.2
v5.16.3
v5.16.4
v5.16.5
v5.16.6
v5.16.7
v5.16.8
v5.16.9
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

vanir_signatures

[
    {
        "id": "CVE-2022-49201-0592a1e7",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "270633578281578985276358643507823453779",
                "243691557314964555301915667468504991694",
                "287326447440140253298428242622315115384",
                "305132075850116823833010419630055234286",
                "145413696618314889503968941355617152258",
                "21773125955652950099259154631056012110",
                "130717213392983836839841956153409025820",
                "306554306723503218878813037834327534228",
                "335320845415094825276526745830909165241",
                "218247964941911888216680108287612435430",
                "69257995917214757997193852349158912498",
                "308398805144910036854808839400220155095",
                "304925287745125964205770715688482447560",
                "170895351066612636838398118766799111401",
                "254871486291987561175306947823541725493",
                "238425374637898151766537613509173219073",
                "159955364137644250258937077049679706989",
                "57212571071233827898587006318843412082",
                "58803552610877839848094770824660322343",
                "145943005399381911082125151190526435198",
                "214400386010378847455698042587857802723",
                "136386998761211033940651799684213026322",
                "28736048945892428990684923977201167490",
                "256079501225231956971836576054349449130",
                "30952230711210855104895160781190325563",
                "188023641585185418882176671109942822891",
                "178396095776436209221161682917204532127",
                "73144423242889171853396633044506331069",
                "273729218437528376840161578514099349840",
                "142403247922944648396661462530739359665",
                "136395847629348223755920819503288463735",
                "17141771290165046160283013714293097601",
                "196203318942983818344553279640283448830",
                "262824912053276661939559938163553173456",
                "258379864329349255118918241163948020467",
                "332057590222630454608705518946080133263",
                "30139764843099989465123077187413122523",
                "111803249402593098674004258784465757672",
                "127165108643164623578452643397658456387",
                "112660447337556220673346980279471426097",
                "56492923550646141834158056156848431776",
                "63871903429878941574281500533897254871"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-08d8d4f4",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1344.0,
            "function_hash": "158178252685694487188443912138423879651"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "function": "ibmvnic_tx_scrq_clean_buffer",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-17ba7628",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 4806.0,
            "function_hash": "28796901087535525129854907362961190841"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "function": "ibmvnic_xmit",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-253e309e",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 206.0,
            "function_hash": "1449393380821630522895337942219719859"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "function": "ibmvnic_cleanup",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-28d77d7d",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "17556901145472012394074136120130772065",
                "60402311667577709120308035002127316979",
                "102836326830577946685460010999908268443",
                "288353452960649887648057861964339452052",
                "5235275956765291967120196248558839796",
                "126284636085777421801794290365242943547"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.h"
        }
    },
    {
        "id": "CVE-2022-49201-2dee0bb4",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 991.0,
            "function_hash": "113929579083386228053938159656071609865"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "function": "__ibmvnic_open",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-33d28a19",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 991.0,
            "function_hash": "113929579083386228053938159656071609865"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "function": "__ibmvnic_open",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-3689da16",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1344.0,
            "function_hash": "158178252685694487188443912138423879651"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "function": "ibmvnic_tx_scrq_clean_buffer",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-3d58c034",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1670.0,
            "function_hash": "99752291408545669285694088939233501077"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "function": "ibmvnic_complete_tx",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-427eeb25",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "17556901145472012394074136120130772065",
                "60402311667577709120308035002127316979",
                "102836326830577946685460010999908268443",
                "288353452960649887648057861964339452052",
                "5235275956765291967120196248558839796",
                "126284636085777421801794290365242943547"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.h"
        }
    },
    {
        "id": "CVE-2022-49201-4cb7cfea",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 4794.0,
            "function_hash": "250570664930868581792383593260622305074"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "function": "ibmvnic_xmit",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-56e38453",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 206.0,
            "function_hash": "1449393380821630522895337942219719859"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "function": "ibmvnic_cleanup",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-572fb569",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1670.0,
            "function_hash": "99752291408545669285694088939233501077"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "function": "ibmvnic_complete_tx",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-59ba927e",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 244.0,
            "function_hash": "211398287048830159211076784213979405951"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "function": "ibmvnic_cleanup",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-5d548c51",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 991.0,
            "function_hash": "113929579083386228053938159656071609865"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "function": "__ibmvnic_open",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-6d2d4d6a",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "270633578281578985276358643507823453779",
                "243691557314964555301915667468504991694",
                "287326447440140253298428242622315115384",
                "305132075850116823833010419630055234286",
                "145413696618314889503968941355617152258",
                "21773125955652950099259154631056012110",
                "130717213392983836839841956153409025820",
                "306554306723503218878813037834327534228",
                "335320845415094825276526745830909165241",
                "218247964941911888216680108287612435430",
                "69257995917214757997193852349158912498",
                "308398805144910036854808839400220155095",
                "304925287745125964205770715688482447560",
                "170895351066612636838398118766799111401",
                "254871486291987561175306947823541725493",
                "238425374637898151766537613509173219073",
                "159955364137644250258937077049679706989",
                "57212571071233827898587006318843412082",
                "58803552610877839848094770824660322343",
                "145943005399381911082125151190526435198",
                "214400386010378847455698042587857802723",
                "136386998761211033940651799684213026322",
                "28736048945892428990684923977201167490",
                "256079501225231956971836576054349449130",
                "30952230711210855104895160781190325563",
                "188023641585185418882176671109942822891",
                "178396095776436209221161682917204532127",
                "73144423242889171853396633044506331069",
                "273729218437528376840161578514099349840",
                "142403247922944648396661462530739359665",
                "136395847629348223755920819503288463735",
                "17141771290165046160283013714293097601",
                "196203318942983818344553279640283448830",
                "262824912053276661939559938163553173456",
                "258379864329349255118918241163948020467",
                "332057590222630454608705518946080133263",
                "30139764843099989465123077187413122523",
                "111803249402593098674004258784465757672",
                "127165108643164623578452643397658456387",
                "112660447337556220673346980279471426097",
                "56492923550646141834158056156848431776",
                "63871903429878941574281500533897254871"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-7b186e6c",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1670.0,
            "function_hash": "99752291408545669285694088939233501077"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "function": "ibmvnic_complete_tx",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-81604c36",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 206.0,
            "function_hash": "1449393380821630522895337942219719859"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "function": "ibmvnic_cleanup",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-9b8a918f",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 991.0,
            "function_hash": "113929579083386228053938159656071609865"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "function": "__ibmvnic_open",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-9fdef3d7",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "270633578281578985276358643507823453779",
                "243691557314964555301915667468504991694",
                "287326447440140253298428242622315115384",
                "305132075850116823833010419630055234286",
                "145413696618314889503968941355617152258",
                "21773125955652950099259154631056012110",
                "130717213392983836839841956153409025820",
                "306554306723503218878813037834327534228",
                "335320845415094825276526745830909165241",
                "218247964941911888216680108287612435430",
                "69257995917214757997193852349158912498",
                "308398805144910036854808839400220155095",
                "304925287745125964205770715688482447560",
                "170895351066612636838398118766799111401",
                "254871486291987561175306947823541725493",
                "238425374637898151766537613509173219073",
                "159955364137644250258937077049679706989",
                "57212571071233827898587006318843412082",
                "58803552610877839848094770824660322343",
                "145943005399381911082125151190526435198",
                "214400386010378847455698042587857802723",
                "136386998761211033940651799684213026322",
                "28736048945892428990684923977201167490",
                "256079501225231956971836576054349449130",
                "30952230711210855104895160781190325563",
                "188023641585185418882176671109942822891",
                "178396095776436209221161682917204532127",
                "73144423242889171853396633044506331069",
                "273729218437528376840161578514099349840",
                "142403247922944648396661462530739359665",
                "136395847629348223755920819503288463735",
                "17141771290165046160283013714293097601",
                "196203318942983818344553279640283448830",
                "262824912053276661939559938163553173456",
                "258379864329349255118918241163948020467",
                "332057590222630454608705518946080133263",
                "30139764843099989465123077187413122523",
                "111803249402593098674004258784465757672",
                "127165108643164623578452643397658456387",
                "112660447337556220673346980279471426097",
                "56492923550646141834158056156848431776",
                "63871903429878941574281500533897254871"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-a27ee684",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1670.0,
            "function_hash": "99752291408545669285694088939233501077"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "function": "ibmvnic_complete_tx",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-a324d163",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1344.0,
            "function_hash": "158178252685694487188443912138423879651"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "function": "ibmvnic_tx_scrq_clean_buffer",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-b2e4937b",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "270633578281578985276358643507823453779",
                "243691557314964555301915667468504991694",
                "287326447440140253298428242622315115384",
                "305132075850116823833010419630055234286",
                "145413696618314889503968941355617152258",
                "21773125955652950099259154631056012110",
                "130717213392983836839841956153409025820",
                "306554306723503218878813037834327534228",
                "335320845415094825276526745830909165241",
                "218247964941911888216680108287612435430",
                "69257995917214757997193852349158912498",
                "308398805144910036854808839400220155095",
                "304925287745125964205770715688482447560",
                "170895351066612636838398118766799111401",
                "254871486291987561175306947823541725493",
                "238425374637898151766537613509173219073",
                "159955364137644250258937077049679706989",
                "57212571071233827898587006318843412082",
                "58803552610877839848094770824660322343",
                "145943005399381911082125151190526435198",
                "214400386010378847455698042587857802723",
                "136386998761211033940651799684213026322",
                "28736048945892428990684923977201167490",
                "256079501225231956971836576054349449130",
                "30952230711210855104895160781190325563",
                "188023641585185418882176671109942822891",
                "178396095776436209221161682917204532127",
                "73144423242889171853396633044506331069",
                "273729218437528376840161578514099349840",
                "142403247922944648396661462530739359665",
                "136395847629348223755920819503288463735",
                "17141771290165046160283013714293097601",
                "196203318942983818344553279640283448830",
                "262824912053276661939559938163553173456",
                "258379864329349255118918241163948020467",
                "332057590222630454608705518946080133263",
                "30139764843099989465123077187413122523",
                "111803249402593098674004258784465757672",
                "127165108643164623578452643397658456387",
                "112660447337556220673346980279471426097",
                "56492923550646141834158056156848431776",
                "63871903429878941574281500533897254871"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-b843c288",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 1344.0,
            "function_hash": "158178252685694487188443912138423879651"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "function": "ibmvnic_tx_scrq_clean_buffer",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-d7a9ddf0",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "17556901145472012394074136120130772065",
                "60402311667577709120308035002127316979",
                "102836326830577946685460010999908268443",
                "288353452960649887648057861964339452052",
                "5235275956765291967120196248558839796",
                "126284636085777421801794290365242943547"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.h"
        }
    },
    {
        "id": "CVE-2022-49201-d97516c9",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 4794.0,
            "function_hash": "250570664930868581792383593260622305074"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
        "target": {
            "function": "ibmvnic_xmit",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    },
    {
        "id": "CVE-2022-49201-dc86920c",
        "signature_type": "Line",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "17556901145472012394074136120130772065",
                "60402311667577709120308035002127316979",
                "102836326830577946685460010999908268443",
                "288353452960649887648057861964339452052",
                "5235275956765291967120196248558839796",
                "126284636085777421801794290365242943547"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4219196d1f662cb10a462eb9e076633a3fc31a15",
        "target": {
            "file": "drivers/net/ethernet/ibm/ibmvnic.h"
        }
    },
    {
        "id": "CVE-2022-49201-e1046e23",
        "signature_type": "Function",
        "signature_version": "v1",
        "digest": {
            "length": 4806.0,
            "function_hash": "28796901087535525129854907362961190841"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@475f9cce98b63bc145b4efa66fa51175d4cb345f",
        "target": {
            "function": "ibmvnic_xmit",
            "file": "drivers/net/ethernet/ibm/ibmvnic.c"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.0
Fixed
5.15.33
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.16.19
Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
5.17.2