CVE-2022-49583

iavf: Fix handling of dummy receive descriptors

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 23, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix handling of dummy receive descriptors

Fix memory leak caused by not handling dummy receive descriptor properly. iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen.

[Jesse: massaged commit message]

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	efa14c3985828da3163f5372137cb64d992b0f79 to before d88d59faf4e6f9cc4767664206afdb999b10ec77Affected efa14c3985828da3163f5372137cb64d992b0f79 to before c6af94324911ef0846af1a5ce5e049ca736db34bAffected efa14c3985828da3163f5372137cb64d992b0f79 to before 2918419c06088f6709ceb543feb01752779ade4cAffected efa14c3985828da3163f5372137cb64d992b0f79 to before 6edb818732fc05fda495f5b3a749bd1cee01398bAffected efa14c3985828da3163f5372137cb64d992b0f79 to before a9f49e0060301a9bfebeca76739158d0cf91cdf6Affected 2a51e334a0ade539e5b0fcfdbd8b43acb9c7547dAffected 833577ecf3451c7306abb48f221d365c2ee4cc1bAffected 5.1.20 to before 5.2Affected 5.2.3 to before 5.3Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

efa14c3985828da3163f5372137cb64d992b0f79 to before d88d59faf4e6f9cc4767664206afdb999b10ec77Affected
efa14c3985828da3163f5372137cb64d992b0f79 to before c6af94324911ef0846af1a5ce5e049ca736db34bAffected
efa14c3985828da3163f5372137cb64d992b0f79 to before 2918419c06088f6709ceb543feb01752779ade4cAffected
efa14c3985828da3163f5372137cb64d992b0f79 to before 6edb818732fc05fda495f5b3a749bd1cee01398bAffected
efa14c3985828da3163f5372137cb64d992b0f79 to before a9f49e0060301a9bfebeca76739158d0cf91cdf6Affected
2a51e334a0ade539e5b0fcfdbd8b43acb9c7547dAffected
833577ecf3451c7306abb48f221d365c2ee4cc1bAffected
5.1.20 to before 5.2Affected
5.2.3 to before 5.3Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.