CVE-2022-50636

A flaw was found in the way the Linux kernel’s PCI subsystem detects the presence of devices for Single Root I/O Virtualization,Virtual Functions (VFs). The existing pci_device_is_present() implementation incorrectly determines that VFs are absent by reading the Vendor and Device IDs, which return 0xffff, leading to improper handling of these devices. An update has been provided to check the associated Physical Function (PF) to correctly determine device presence.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.