CVE-2022-49642

net: stmmac: dwc-qos: Disable split header for Tegra194

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 02:23 AM UTC
Updated: June 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed [0]. The problem occurs when the split header feature is enabled in the stmmac driver. In the bad case, a larger than expected buffer length is received and causes the calculation of the total buffer length to overflow. This results in a very large buffer length that causes the kernel to crash. Why this larger buffer length is received is not clear, however, the feedback from the NVIDIA design team is that the split header feature is not supported for Tegra194. Therefore, disable split header support for Tegra194 to prevent these random crashes from occurring. [0] https://lore.kernel.org/linux-tegra/[email protected]/

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.11 ≤ v < 5.15.565.16 ≤ v < 5.18.135.4 ≤ v < 5.10.1325.4 ≤ v < 5.15.565.4 ≤ v < 5.18.135.4 ≤ v < 5.195.4 ≤ v < 5.4.2075.5 ≤ v < 5.10.1325.19 rc15.19 rc25.19 rc35.19 rc45.19 rc55.19 rc65.467afd6d1cfdf0d0461fe3c4c922447f3e9b1c6ee
Vendor states this is fixed in 029c1c2059e9c4b38f97a06204cdecd10cfbeb8a (fixed)
Vendor states this is fixed in 2968830c9b47ce093237483c6207c61065712386 (fixed)
Vendor states this is fixed in 9cc8edc571b871d974b3289868553f9ce544aba6 (fixed)
Vendor states this is fixed in cfa4caf3e881ad6dd366c903c34f1c7f21b857ab (fixed)
Vendor states this is fixed in d5c315a787652c35045044877a249f7d5c8a4104 (fixed)
Vendor states this is fixed in 5.10.132 (unaffected)
Vendor states this is fixed in 5.15.56 (unaffected)
Vendor states this is fixed in 5.18.13 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.4 (unaffected)
Vendor states this is fixed in 5.4.207 (unaffected)

References (5)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/029c1c2059e9c4b38f97a06204cdecd10cfbeb8a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2968830c9b47ce093237483c6207c61065712386
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9cc8edc571b871d974b3289868553f9ce544aba6
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/cfa4caf3e881ad6dd366c903c34f1c7f21b857ab
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d5c315a787652c35045044877a249f7d5c8a4104

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-190

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card