{"id":"CVE-2022-49858","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix SQE threshold checking\n\nCurrent way of checking available SQE count which is based on\nHW updated SQB count could result in driver submitting an SQE\nev…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix SQE threshold checking\n\nCurrent way of checking available SQE count which is based on\nHW updated SQB count could result in driver submitting an SQE\nev…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.6, < 6.0.9","linux_kernel = 6.1"],"patched":["linux_kernel 6.0.9"],"published":"2025-05-01","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:25.207","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-49858","references":[{"url":"https://git.kernel.org/stable/c/015e3c0a3b16193aab23beefe4719484b9984c2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.0018,"epssPercentile":0.0747,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:18:20.846931Z"},"ingestedAt":"2026-10-15T21:45:11.288Z","slug":"CVE-2022-49858","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix SQE threshold checking\n\nCurrent way of checking available SQE count which is based on\nHW updated SQB count could result in driver submitting an SQE\neven before CQE for the previously transmitted SQE at the same\nindex is processed in NAPI resulting losing SKB pointers,\nhence a leak. Fix this by checking a consumer index which\nis updated once CQE is processed.\n\n## Affected\n\n- `linux_kernel >= 5.6, < 6.0.9`\n- `linux_kernel = 6.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.0.9`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}