CVE-2022-49583

Source
https://cve.org/CVERecord?id=CVE-2022-49583
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49583.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49583
Downstream
DEBIAN (1)
RHSA (2)
SUSE (4)
UBUNTU (1)
Related
Published
2025-02-26T02:23:20Z
Modified
2026-10-20T10:31:07Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
iavf: Fix handling of dummy receive descriptors
Details

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix handling of dummy receive descriptors

Fix memory leak caused by not handling dummy receive descriptor properly. iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen.

[Jesse: massaged commit message]

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49583.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
efa14c3985828da3163f5372137cb64d992b0f79
Fixed
d88d59faf4e6f9cc4767664206afdb999b10ec77
Fixed
c6af94324911ef0846af1a5ce5e049ca736db34b
Fixed
2918419c06088f6709ceb543feb01752779ade4c
Fixed
6edb818732fc05fda495f5b3a749bd1cee01398b
Fixed
a9f49e0060301a9bfebeca76739158d0cf91cdf6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.1.20
Fixed
5.2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.2.3
Fixed
5.3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2a51e334a0ade539e5b0fcfdbd8b43acb9c7547d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
833577ecf3451c7306abb48f221d365c2ee4cc1b

Affected versions

v5.*
v5.1.20
v5.1.21
v5.2.10
v5.2.11
v5.2.12
v5.2.13
v5.2.14
v5.2.15
v5.2.16
v5.2.17
v5.2.18
v5.2.19
v5.2.20
v5.2.21
v5.2.3
v5.2.4
v5.2.5
v5.2.6
v5.2.7
v5.2.8
v5.2.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49583.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.3.0
Fixed
5.4.208
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.134
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.58
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.15

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49583.json"