{
  "cveId": "CVE-2022-48653",
  "url": "https://patchblox.com/security/cve/CVE-2022-48653",
  "summary": "CVE-2022-48653 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48653, released April 28, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ice: Don\u0027t double unplug aux on peer initiated r...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ice: Don\u0027t double unplug aux on peer initiated reset  In the IDC callback that is accessed when the aux drivers request a reset, the function to unplug the aux devices is called.  This function is also called in the ice_prepare_for_reset function. This double call is causing a \u0022scheduling while atomic\u0022 BUG.  [  662.676430] ice 0000:4c:00.0 rocep76s0: cqp opcode = 0x1 maj_err_code = 0xffff min_err_code = 0x8003  [  662.676609] ice 0000:4c:00.0 rocep76s0: [Modify QP Cmd Error][op_code=8] status=-29 waiting=1 completion_err=1 maj=0xffff min=0x8003  [  662.815006] ice 0000:4c:00.0 rocep76s0: ICE OICR event notification: oicr = 0x10000003  [  662.815014] ice 0000:4c:00.0 rocep76s0: critical PE Error, GLPE_CRITERR=0x00011424  [  662.815017] ice 0000:4c:00.0 rocep76s0: Requesting a reset  [  662.815475] BUG: scheduling while atomic: swapper/37/0/0x00010002  [  662.815475] BUG: scheduling while atomic: swapper/37/0/0x00010002 [  662.815477] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache netfs rfkill 8021q garp mrp stp llc vfat fat rpcrdma intel_rapl_msr intel_rapl_common sunrpc i10nm_edac rdma_ucm nfit ib_srpt libnvdimm ib_isert iscsi_target_mod x86_pkg_temp_thermal intel_powerclamp coretemp target_core_mod snd_hda_intel ib_iser snd_intel_dspcfg libiscsi snd_intel_sdw_acpi scsi_transport_iscsi kvm_intel iTCO_wdt rdma_cm snd_hda_codec kvm iw_cm ipmi_ssif iTCO_vendor_support snd_hda_core irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel snd_hwdep snd_seq snd_seq_device rapl snd_pcm snd_timer isst_if_mbox_pci pcspkr isst_if_mmio irdma intel_uncore idxd acpi_ipmi joydev isst_if_common snd mei_me idxd_bus ipmi_si soundcore i2c_i801 mei ipmi_devintf i2c_smbus i2c_ismt ipmi_msghandler acpi_power_meter acpi_pad rv(OE) ib_uverbs ib_cm ib_core xfs libcrc32c ast i2c_algo_bit drm_vram_helper drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops drm_ttm_helpe  r ttm [  662.815546]  nvme nvme_core ice drm crc32c_intel i40e t10_pi wmi pinctrl_emmitsburg dm_mirror dm_region_hash dm_log dm_mod fuse [  662.815557] Preemption disabled at: [  662.815558] [\u003C0000000000000000\u003E] 0x0 [  662.815563] CPU: 37 PID: 0 Comm: swapper/37 Kdump: loaded Tainted: G S         OE     5.17.1 #2 [  662.815566] Hardware name: Intel Corporation D50DNP/D50DNP, BIOS SE5C6301.86B.6624.D18.2111021741 11/02/2021 [  662.815568] Call Trace: [  662.815572]  \u003CIRQ\u003E [  662.815574]  dump_stack_lvl\u002B0x33/0x42 [  662.815581]  __schedule_bug.cold.147\u002B0x7d/0x8a [  662.815588]  __schedule\u002B0x798/0x990 [  662.815595]  schedule\u002B0x44/0xc0 [  662.815597]  schedule_preempt_disabled\u002B0x14/0x20 [  662.815600]  __mutex_lock.isra.11\u002B0x46c/0x490 [  662.815603]  ? __ibdev_printk\u002B0x76/0xc0 [ib_core] [  662.815633]  device_del\u002B0x37/0x3d0 [  662.815639]  ice_unplug_aux_dev\u002B0x1a/0x40 [ice] [  662.815674]  ice_schedule_reset\u002B0x3c/0xd0 [ice] [  662.815693]  irdma_iidc_event_handler.cold.7\u002B0xb6/0xd3 [irdma] [  662.815712]  ? bitmap_find_next_zero_area_off\u002B0x45/0xa0 [  662.815719]  ice_send_event_to_aux\u002B0x54/0x70 [ice] [  662.815741]  ice_misc_intr\u002B0x21d/0x2d0 [ice] [  662.815756]  __handle_irq_event_percpu\u002B0x4c/0x180 [  662.815762]  handle_irq_event_percpu\u002B0xf/0x40 [  662.815764]  handle_irq_event\u002B0x34/0x60 [  662.815766]  handle_edge_irq\u002B0x9a/0x1c0 [  662.815770]  __common_interrupt\u002B0x62/0x100 [  662.815774]  common_interrupt\u002B0xb4/0xd0 [  662.815779]  \u003C/IRQ\u003E [  662.815780]  \u003CTASK\u003E [  662.815780]  asm_common_interrupt\u002B0x1e/0x40 [  662.815785] RIP: 0010:cpuidle_enter_state\u002B0xd6/0x380 [  662.815789] Code: 49 89 c4 0f 1f 44 00 00 31 ff e8 65 d7 95 ff 45 84 ff 74 12 9c 58 f6 c4 02 0f 85 64 02 00 00 31 ff e8 ae c5 9c ff fb 45 85 f6 \u003C0f\u003E 88 12 01 00 00 49 63 d6 4c 2b 24 24 48 8d 04 52 48 8d 04 82 49 [  662.815791] RSP: 0018:ff2c2c4f18edbe80 EFLAGS: 00000202 [  662.815793] RAX: ff280805df140000 RBX: 0000000000000002 RCX: 000000000000001f [  662.815795] RDX: 0000009a52da2d08 R ---truncated---",
  "published": "2024-04-28T13:15:07Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00226,
  "epssPercentile": 0.13348,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48653",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48653",
      "released": "2024-04-28T13:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48653",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48653",
      "released": "2024-04-28T13:15:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.2-1",
      "fix": "DEBIAN-CVE-2022-48653",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48653",
      "released": "2024-04-28T13:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}