CVE-2022-48814

What it actually does

The flaw triggers a kernel panic in mdiobus_free when invoked from devm_mdiobus_free during driver unbind on shutdown for the Seville VSC9959 DSA switch, because the MDIO bus was allocated via devres but not registered under devres, allowing device_links_unbind_consumers to trigger removal on buses like fsl-mc.

Why it matters to the business

Affected Linux systems using specific DSA switches may crash during shutdown or driver unload, causing service interruption, potential data corruption on reboot, and increased operational overhead in cloud, embedded, and enterprise environments with high downstream kernel usage.

How an attack unfolds

An attacker with local or physical access triggers a system shutdown or bus-level device removal event on a host running a vulnerable kernel with the seville driver; device links propagate unbind to the switch driver, devres release invokes mdiobus_free on a still-registered bus, and the resulting panic occurs.

How to fix it

Upgrade to fixed kernel versions including Linux 4.14.265, 5.10.103-1 (Debian 11), 5.16.10-1 (Debian 12/13), and Ubuntu 5.15.0-23.23 or later package revisions such as linux-aws-5.15 5.15.0-1014.18~20.04.1; rebuild and reboot with the patched kernel.

How to confirm the fix worked

Verify running kernel version matches or exceeds listed fixed releases; confirm of_mdiobus_register calls are replaced by devm equivalents in the seville driver source and test shutdown sequences for absence of mdiobus_free panics.

Typical attack path

1. Obtain local access or trigger shutdown sequence
2. Initiate system power-off or fsl-mc bus removal affecting DSA master
3. Device link causes seville driver unbind
4. devres_release_all calls mdiobus_free without prior unregister
5. Kernel panic terminates the system

How to detect it

Search kernel logs and dmesg for panic strings referencing mdiobus_free, devm_mdiobus_free, seville, or device_links_unbind_consumers during shutdown events; correlate with fsl-mc or DSA master bus activity.

• mdiobus_free
• devm_mdiobus_free
• seville switch driver
• device_links_unbind_consumers

What your security team should do

• Prioritize kernel package updates on all affected Debian, Ubuntu, and upstream Linux deployments within 30 days
• Audit systems for Seville or VSC9959 DSA hardware presence before applying changes
• Enable kernel crash logging and monitor for shutdown-related panics as interim detection
• Test patched kernels in staging environments with matching network configurations