CVE-2022-48729

A flaw was found in the Linux kernel's InfiniBand hfi1 driver. When configuring the IP-over-InfiniBand (IPoIB) transmit queue size above its default value, an incorrect calculation in the transmit ring drain routine leads to invalid memory access. A local privileged user can trigger this flaw when altering network interface settings, causing a kernel panic and resulting in a Denial of Service (DoS).

This vulnerability is rated with a Low severity because triggering it requires administrative privileges (such as CAP_NET_ADMIN) on systems with specialized Intel Omni-Path Architecture (hfi1) hardware. Standard Red Hat Enterprise Linux environments operate with default transmit queue sizes and do not experience this failure under typical configurations. Because an attacker must already possess elevated permissions to reconfigure network interface queue parameters—privileges that already grant the ability to halt or reboot the host—the resulting kernel panic presents minimal additional security exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.