i40e Driver Vulnerability in Linux Kernel by Intel

CVE-2022-49725

Summary

A race condition vulnerability exists in the i40e driver of the Linux kernel that can lead to system crashes. During the process of resetting the physical function (PF) and running diagnostic tests, insufficient timing between two calls to i40e_vsi_close might occur. If these two calls overlap, it can trigger a panic in the system. The issue arises when the diag_test operation is initiated before the prior reset operation has completed, causing the second i40e_vsi_close to execute prematurely. The recent fix implements a check to ensure that diagnostic tests do not commence if the PF is currently in a reset state, thereby preventing the race condition and system instability.

References