PT-2025-18586

CVE-2022-49869

·

Published

2025-05-01

·

Updated

2026-07-25

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.18.0 through 4.18.0-348.el8.x86 64
Description A possible crash in the bnxt en driver has been resolved. The issue occurred during the error recovery sequence when the rtnl lock was not held for the entire duration, and some data structures may have been freed during the sequence. To ensure the device is fully operational before reconfiguring coalescing settings, the BNXT STATE OPEN flag is checked instead of netif running(). This fix addresses a possible crash that may have occurred due to a kernel NULL pointer dereference.
Recommendations For Linux kernel version 4.18.0-348.el8.x86 64, update to a version that includes the fix for the bnxt en driver issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1778266904
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:02173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025_02262-1
SUSE-SU-2025:2173-1
Found an issue in the description? Have something to add? Feel free to write us 👾