GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-49725 (GCVE-0-2022-49725)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:24 – Updated: 2026-08-05 08:56
VLAI
Title
i40e: Fix call trace in setup_tx_descriptors
Summary
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem was that pf reset calls i40e_vsi_close in prep_for_reset and ethtool -t calls i40e_vsi_close in diag_test. If there was not enough time between those commands the second i40e_vsi_close starts before previous i40e_vsi_close was done which leads to crash. Add check to diag_test if pf is in reset and don't start offline tests if it is true. Add netif_info("testing failed") into unhappy path of i40e_diag_test()
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < 5ba9956ca57e361fb13ea369bb753eb33177acc7 (git)
Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < 15950157e2c24865b696db1c9ccc72743ae0e967 (git)
Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < ff6e03fe84bc917bb0c907d02de668c2fe101712 (git)
Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < 814092927a215f5ca6c08249ec72a205e0b473cd (git)
Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < 0a4e5a3dc5e41212870e6043895ae02455c93f63 (git)
Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < 322271351b0e41565171e4cce70ea41854fac115 (git)
Affected: e17bc411aea8fbebc51857037f104ab09f765120 , < fd5855e6b1358e816710afee68a1d2bc685176ca (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.2
Unaffected: 0 , < 4.2 (semver)
Unaffected: 4.14.285 , ≤ 4.14.* (semver)
Unaffected: 4.19.249 , ≤ 4.19.* (semver)
Unaffected: 5.4.200 , ≤ 5.4.* (semver)
Unaffected: 5.10.124 , ≤ 5.10.* (semver)
Unaffected: 5.15.49 , ≤ 5.15.* (semver)
Unaffected: 5.18.6 , ≤ 5.18.* (semver)
Unaffected: 5.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/i40e/i40e_ethtool.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5ba9956ca57e361fb13ea369bb753eb33177acc7",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            },
            {
              "lessThan": "15950157e2c24865b696db1c9ccc72743ae0e967",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            },
            {
              "lessThan": "ff6e03fe84bc917bb0c907d02de668c2fe101712",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            },
            {
              "lessThan": "814092927a215f5ca6c08249ec72a205e0b473cd",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            },
            {
              "lessThan": "0a4e5a3dc5e41212870e6043895ae02455c93f63",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            },
            {
              "lessThan": "322271351b0e41565171e4cce70ea41854fac115",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            },
            {
              "lessThan": "fd5855e6b1358e816710afee68a1d2bc685176ca",
              "status": "affected",
              "version": "e17bc411aea8fbebc51857037f104ab09f765120",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/i40e/i40e_ethtool.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "lessThan": "4.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.285",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.200",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.124",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.49",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.285",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.249",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.200",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.124",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.49",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.6",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix call trace in setup_tx_descriptors\n\nAfter PF reset and ethtool -t there was call trace in dmesg\nsometimes leading to panic. When there was some time, around 5\nseconds, between reset and test there were no errors.\n\nProblem was that pf reset calls i40e_vsi_close in prep_for_reset\nand ethtool -t calls i40e_vsi_close in diag_test. If there was not\nenough time between those commands the second i40e_vsi_close starts\nbefore previous i40e_vsi_close was done which leads to crash.\n\nAdd check to diag_test if pf is in reset and don\u0027t start offline\ntests if it is true.\nAdd netif_info(\"testing failed\") into unhappy path of i40e_diag_test()"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only through the local SIOCETHTOOL ETHTOOL_TEST ioctl path (__dev_ethtool \u2192 ethtool_self_test \u2192 i40e_diag_test \u2192 i40e_close/i40e_do_reset), not via remote packet processing or an adjacent-link protocol.\nAC:L - An attacker who can drive PF reset and immediately run ethtool -t controls both sides of the race; the multi-second RESET_RECOVERY_PENDING window (prep_for_reset without rtnl on the async service-task path, then rebuild) is large enough to hit reliably by issuing both operations back-to-back.\nPR:L - ETHTOOL_TEST requires ns_capable(net-\u003euser_ns, CAP_NET_ADMIN), which is available in a user-namespace\u2013owned netns with a delegated i40e PF, matching prior Intel ethernet/ethtool scoring (e.g. ice AF_XDP CAP_NET_ADMIN paths).\nUI:N - The attacker issues the ethtool self-test (and the concurrent reset trigger) from their own process; no separate victim action such as mounting media or opening a file is required.\nS:U - The race corrupts host-kernel i40e ring/VSI state within the same OS security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - Overlapping i40e_vsi_close calls free TX/RX resources outside the __I40E_VSI_DOWN bit (desc check then kfree(tx_bi)/dma_free_coherent with no serialization), yielding a heap double-free/UAF that can be leveraged for high-impact kernel memory disclosure.\nI:H - The same unsynchronized double-free/UAF of tx_bi and DMA descriptor memory is exploitable heap corruption that, per UAF guidance, enables write and control-flow hijack primitives beyond a pure crash.\nA:H - The race produces kernel call traces and panics (including WARN_ON(tx_ring-\u003etx_bi) in i40e_setup_tx_descriptors and faults from the double-free/UAF), which is a full availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:56:07.991Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7"
        },
        {
          "url": "https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712"
        },
        {
          "url": "https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd"
        },
        {
          "url": "https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63"
        },
        {
          "url": "https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115"
        },
        {
          "url": "https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca"
        }
      ],
      "title": "i40e: Fix call trace in setup_tx_descriptors",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49725",
    "datePublished": "2025-02-26T02:24:37.349Z",
    "dateReserved": "2025-02-26T02:21:30.447Z",
    "dateUpdated": "2026-08-05T08:56:07.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49725",
      "date": "2026-09-16",
      "epss": "0.003",
      "percentile": "0.22648"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-49725\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-02-26T07:01:48.167\",\"lastModified\":\"2026-08-04T10:17:54.683\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ni40e: Fix call trace in setup_tx_descriptors\\n\\nAfter PF reset and ethtool -t there was call trace in dmesg\\nsometimes leading to panic. When there was some time, around 5\\nseconds, between reset and test there were no errors.\\n\\nProblem was that pf reset calls i40e_vsi_close in prep_for_reset\\nand ethtool -t calls i40e_vsi_close in diag_test. If there was not\\nenough time between those commands the second i40e_vsi_close starts\\nbefore previous i40e_vsi_close was done which leads to crash.\\n\\nAdd check to diag_test if pf is in reset and don\u0027t start offline\\ntests if it is true.\\nAdd netif_info(\\\"testing failed\\\") into unhappy path of i40e_diag_test()\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: i40e: Se corrige el seguimiento de llamadas en setup_tx_descriptors Despu\u00e9s de reiniciar PF y ethtool -t, hab\u00eda un seguimiento de llamadas en dmesg que a veces provocaba p\u00e1nico. Cuando hab\u00eda un tiempo, alrededor de 5 segundos, entre reiniciar y probar, no hab\u00eda errores. El problema era que pf reset llama a i40e_vsi_close en prep_for_reset y ethtool -t llama a i40e_vsi_close en diag_test. Si no hab\u00eda suficiente tiempo entre esos comandos, el segundo i40e_vsi_close se inicia antes de que se hiciera el i40e_vsi_close anterior, lo que provoca un bloqueo. Agregue una verificaci\u00f3n a diag_test si pf est\u00e1 en reinicio y no inicie pruebas fuera de l\u00ednea si es verdadero. Agregue netif_info(\\\"prueba fallida\\\") en la ruta no feliz de i40e_diag_test()\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/intel/i40e/i40e_ethtool.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"5ba9956ca57e361fb13ea369bb753eb33177acc7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"15950157e2c24865b696db1c9ccc72743ae0e967\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"ff6e03fe84bc917bb0c907d02de668c2fe101712\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"814092927a215f5ca6c08249ec72a205e0b473cd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"0a4e5a3dc5e41212870e6043895ae02455c93f63\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"322271351b0e41565171e4cce70ea41854fac115\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e17bc411aea8fbebc51857037f104ab09f765120\",\"lessThan\":\"fd5855e6b1358e816710afee68a1d2bc685176ca\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/intel/i40e/i40e_ethtool.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.285\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.249\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.200\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.124\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.49\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.18.6\",\"lessThanOrEqual\":\"5.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.2\",\"versionEndExcluding\":\"4.14.285\",\"matchCriteriaId\":\"7825CAF8-06A7-46C0-AB6B-CBBB62BE926B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.249\",\"matchCriteriaId\":\"8A08E48B-CA77-4A21-9558-17D61C146BE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.200\",\"matchCriteriaId\":\"80B2AE57-4A7E-40BB-8C83-33D4436CE199\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.124\",\"matchCriteriaId\":\"6442F2CD-FF1C-4574-9948-138835E635D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.49\",\"matchCriteriaId\":\"697D250E-E0A4-41BE-BB54-96385E129206\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"5.18.6\",\"matchCriteriaId\":\"CDD33A19-B51E-4090-A47B-073098916815\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8C30C2D-F82D-4D37-AB48-D76ABFBD5377\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF8547FC-C849-4F1B-804B-A93AE2F04A92\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:42:08+00:00",
      "cve": "CVE-2022-49725",
      "id": "CVE-2022-49725",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "76",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: i40e: Fix call trace in setup_tx_descriptors",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49725.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T01:26:31Z",
      "cve": "CVE-2022-49725",
      "id": "CVE-2022-49725",
      "initial_release_date": "2025-02-27T03:02:12Z",
      "product_status:known_affected": "540",
      "product_status:known_not_affected": "179",
      "product_status:recommended": "263",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-49725",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-49725.json",
      "version": "56"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.