CVE-2022-49695

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.3-apu2 #9

Description A use-after-free issue has been identified in the igb clean tx ring routine when the NIC is running in XDP mode. This issue can be triggered by redirecting traffic into the igb NIC and then closing the device while the traffic is flowing. The problem arises from the igb clean tx ring function, which is called by igb down, igb close, and igb xdp.

Recommendations For Linux kernel version 5.18.3-apu2 #9 and earlier, consider updating to a newer version that includes the fix for the use-after-free issue in the igb clean tx ring routine. As a temporary workaround, consider disabling the XDP mode for the igb NIC to minimize the risk of exploitation.