{
  "cveId": "CVE-2022-48729",
  "url": "https://patchblox.com/security/cve/CVE-2022-48729",
  "summary": "CVE-2022-48729 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48729, released June 20, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  IB/hfi1: Fix panic with larger ipoib send_queue_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  IB/hfi1: Fix panic with larger ipoib send_queue_size  When the ipoib send_queue_size is increased from the default the following panic happens:    RIP: 0010:hfi1_ipoib_drain_tx_ring\u002B0x45/0xf0 [hfi1]   Code: 31 e4 eb 0f 8b 85 c8 02 00 00 41 83 c4 01 44 39 e0 76 60 8b 8d cc 02 00 00 44 89 e3 be 01 00 00 00 d3 e3 48 03 9d c0 02 00 00 \u003Cc7\u003E 83 18 01 00 00 00 00 00 00 48 8b bb 30 01 00 00 e8 25 af a7 e0   RSP: 0018:ffffc9000798f4a0 EFLAGS: 00010286   RAX: 0000000000008000 RBX: ffffc9000aa0f000 RCX: 000000000000000f   RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000   RBP: ffff88810ff08000 R08: ffff88889476d900 R09: 0000000000000101   R10: 0000000000000000 R11: ffffc90006590ff8 R12: 0000000000000200   R13: ffffc9000798fba8 R14: 0000000000000000 R15: 0000000000000001   FS:  00007fd0f79cc3c0(0000) GS:ffff88885fb00000(0000) knlGS:0000000000000000   CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033   CR2: ffffc9000aa0f118 CR3: 0000000889c84001 CR4: 00000000001706e0   Call Trace:    \u003CTASK\u003E    hfi1_ipoib_napi_tx_disable\u002B0x45/0x60 [hfi1]    hfi1_ipoib_dev_stop\u002B0x18/0x80 [hfi1]    ipoib_ib_dev_stop\u002B0x1d/0x40 [ib_ipoib]    ipoib_stop\u002B0x48/0xc0 [ib_ipoib]    __dev_close_many\u002B0x9e/0x110    __dev_change_flags\u002B0xd9/0x210    dev_change_flags\u002B0x21/0x60    do_setlink\u002B0x31c/0x10f0    ? __nla_validate_parse\u002B0x12d/0x1a0    ? __nla_parse\u002B0x21/0x30    ? inet6_validate_link_af\u002B0x5e/0xf0    ? cpumask_next\u002B0x1f/0x20    ? __snmp6_fill_stats64.isra.53\u002B0xbb/0x140    ? __nla_validate_parse\u002B0x47/0x1a0    __rtnl_newlink\u002B0x530/0x910    ? pskb_expand_head\u002B0x73/0x300    ? __kmalloc_node_track_caller\u002B0x109/0x280    ? __nla_put\u002B0xc/0x20    ? cpumask_next_and\u002B0x20/0x30    ? update_sd_lb_stats.constprop.144\u002B0xd3/0x820    ? _raw_spin_unlock_irqrestore\u002B0x25/0x37    ? __wake_up_common_lock\u002B0x87/0xc0    ? kmem_cache_alloc_trace\u002B0x3d/0x3d0    rtnl_newlink\u002B0x43/0x60  The issue happens when the shift that should have been a function of the txq item size mistakenly used the ring size.  Fix by using the item size.",
  "published": "2024-06-20T12:15:11Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00206,
  "epssPercentile": 0.10728,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48729",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48729",
      "released": "2024-06-20T12:15:11Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48729",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48729",
      "released": "2024-06-20T12:15:11Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.16.10-1",
      "fix": "DEBIAN-CVE-2022-48729",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48729",
      "released": "2024-06-20T12:15:11Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}