CVE-2022-49725: i40e: Fix call trace in setup_tx_descriptors

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()

Affected products

Linux kernel: from 4.2 before 4.14.285; from 4.15 before 4.19.249; from 4.20 before 5.4.200; from 5.5 before 5.10.124; from 5.11 before 5.15.49; from 5.16 before 5.18.6 — fixed in 4.14.285, 4.19.249, 5.10.124, 5.15.49, 5.18.6, 5.4.200

How to fix

Upgrade to a fixed version: Linux kernel 4.14.285, 4.19.249, 5.10.124, 5.15.49. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-49725 or the next vulnerability affects your stack