CVE-2022-49642

net: stmmac: dwc-qos: Disable split header for Tegra194

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: stmmac: dwc-qos: Disable split header for Tegra194

There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed [0]. The problem occurs when the split header feature is enabled in the stmmac driver. In the bad case, a larger than expected buffer length is received and causes the calculation of the total buffer length to overflow. This results in a very large buffer length that causes the kernel to crash. Why this larger buffer length is received is not clear, however, the feedback from the NVIDIA design team is that the split header feature is not supported for Tegra194. Therefore, disable split header support for Tegra194 to prevent these random crashes from occurring.

[0] https://lore.kernel.org/linux-tegra/b0b17697-f23e-8fa5-3757-604a86f3a095@nvidia.com/

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 67afd6d1cfdf0d0461fe3c4c922447f3e9b1c6ee to before 2968830c9b47ce093237483c6207c61065712386Affected
  • 67afd6d1cfdf0d0461fe3c4c922447f3e9b1c6ee to before 9cc8edc571b871d974b3289868553f9ce544aba6Affected
  • 67afd6d1cfdf0d0461fe3c4c922447f3e9b1c6ee to before d5c315a787652c35045044877a249f7d5c8a4104Affected
  • 67afd6d1cfdf0d0461fe3c4c922447f3e9b1c6ee to before cfa4caf3e881ad6dd366c903c34f1c7f21b857abAffected
  • 67afd6d1cfdf0d0461fe3c4c922447f3e9b1c6ee to before 029c1c2059e9c4b38f97a06204cdecd10cfbeb8aAffected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 5.4.207 through 5.4.*Not affected
  • 5.10.132 through 5.10.*Not affected
  • 5.15.56 through 5.15.*Not affected
  • 5.18.13 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.