CVE-2022-50053
kernel: iavf: Fix reset error handling
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 18, 2025
Updated · October 30, 2026
Description
A deadlock condition exists in the linux kernel such that when calling iavf_close in iavf_reset_task error handling,doing so can lead to double call of napi_disable thereby leading to a denial of service due to the deadlock.
Statement
Red Hat rates this vulnerability as Moderate severity because exploitation requires local access and specific hardware interactions with Intel SR-IOV network devices, with the resulting impact confined to a local denial of service. The issue affects environments utilizing the Intel Adaptive Virtual Function (iavf) driver when rapid reconfiguration or hardware mailbox setup failures trigger an unhandled error state. Systems not utilizing SR-IOV virtual functions via the iavf driver are unaffected by this flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-833 · Deadlock