CVE-2022-49516

A potential NULL point vulnerability was found in the Linux kernel. The ice_get_vf_vsi function can return NULL in some cases when handling messages during a reset where the VSI is being removed and recreated, resulting in a loss of system availability.

This vulnerability is rated as Low severity because exploitation requires specific Intel Ethernet hardware configured with SR-IOV virtual functions. Under standard Red Hat Enterprise Linux deployments, triggering the flaw requires an unprivileged local user or virtual machine guest to initiate communication during an interface reset sequence. A successful exploit results solely in a kernel denial of service without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.