CVE-2022-49725: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()

Affected products

• Linux Linux Kernel: from 4.2, before 4.14.285 (fixed in 4.14.285); from 4.15, before 4.19.249 (fixed in 4.19.249); from 4.20, before 5.4.200 (fixed in 5.4.200); from 5.5, before 5.10.124 (fixed in 5.10.124); from 5.11, before 5.15.49 (fixed in 5.15.49); from 5.16, before 5.18.6 (fixed in 5.18.6); …

Published 2025-02-26. Last modified 2026-08-04.