CVE-2022-48941

A flaw was found in the Linux kernel's ice network driver. A race condition allows a local user to cause a Denial of Service (DoS) or memory corruption during the concurrent reset and removal of Virtual Functions (VFs). Because the driver does not properly synchronize the reset and teardown processes, initiating a reset while virtual functions are being removed can cause the driver to process conflicting tasks simultaneously. This improper handling can lead to a kernel panic and system crash.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires specific Intel network hardware running SR-IOV virtual functions alongside precise timing conditions. To trigger the flaw, an unprivileged or guest user must induce an interface reset concurrently with VF removal initiated on the host, making successful exploitation non-trivial. Systems not utilizing Intel E800 series network adapters or environments that do not dynamically create and remove SR-IOV virtual functions are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.