CVE-2022-49194
A critical flaw in the Linux kernel’s bcmgenet driver can cause network packet handling to fail, leading to system instability. The issue arises from improper ordering of register reads and writes, which newer GCC versions expose. The kernel team has fixed the problem by using stronger read/write operations.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users running versions prior to the patch that fixed the bcmgenet driver, especially those using BCM-based network hardware.
Real-world impact
An attacker could cause a device to become unresponsive or crash by exploiting the driver’s timing issues, potentially disrupting network services.
Why this severity
The CVSS score of 9.8 reflects the vulnerability’s high impact on confidentiality, integrity, and availability, combined with its ease of exploitation over the network and no user interaction required.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix for CVE-2022-49194.
NVD-referenced vendor advisory
Timeline
- Feb 26, 2025 · Feb 26, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.