Linux Kernel Driver Vulnerability in alx

CVE-2022-50498

What is CVE-2022-50498?

A vulnerability exists in the Linux kernel's alx driver, where the driver fails to hold the rtnl_lock during its internal close and re-open functions during suspend/resume. This oversight can lead to assertion failures in the network stack, specifically triggering an RTNL assertion error. Although the driver has its own locking mechanism and does not change the number of transmit queues, it is necessary to address this issue to avoid unnecessary errors in the logs.

References