---
id: CVE-2022-49858
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  octeontx2-pf: Fix SQE threshold checking

  Current way of checking available SQE count which is based on
  HW updated SQB count could result in driver submitting an SQE
  ev…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  octeontx2-pf: Fix SQE threshold checking

  Current way of checking available SQE count which is based on
  HW updated SQB count could result in driver submitting an SQE
  ev…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.6, < 6.0.9'
  - linux_kernel = 6.1
patched:
  - linux_kernel 6.0.9
published: '2025-05-01'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:25.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-49858'
references:
  - url: 'https://git.kernel.org/stable/c/015e3c0a3b16193aab23beefe4719484b9984c2d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.0018
epssPercentile: 0.0747
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:18:20.846931Z'
ingestedAt: '2026-10-15T21:45:11.288Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: Fix SQE threshold checking

Current way of checking available SQE count which is based on
HW updated SQB count could result in driver submitting an SQE
even before CQE for the previously transmitted SQE at the same
index is processed in NAPI resulting losing SKB pointers,
hence a leak. Fix this by checking a consumer index which
is updated once CQE is processed.

## Affected

- `linux_kernel >= 5.6, < 6.0.9`
- `linux_kernel = 6.1`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.0.9`