Security readout for executives and security teams
Plain-English summary
CVE-2022-49158 is a Linux kernel qla2xxx SCSI driver flaw that can trigger a kernel warning during an ADISC cleanup path. The public record describes an error-code translation mismatch, not data theft or remote code execution. Business urgency depends on whether affected kernels use this driver in production storage paths.
Executive priority
Treat as a targeted kernel maintenance item for storage-capable Linux hosts, not an emergency internet-wide exposure. Prioritize if qla2xxx is used in critical infrastructure because driver warnings during cleanup can indicate reliability risk.
Technical view
The issue is in drivers/scsi/qla2xxx/qla_init.c, where qla2x00_async_adisc_sp_done handled a flushed ADISC completion with an error-code type mismatch. The fix adds translation between error-code types. The provided trace occurs during qla2xxx command abort and device removal cleanup.
Likely exposure
Likely limited to Linux systems running affected kernel versions where the qla2xxx SCSI driver is present and active. The source bundle does not identify cloud services, distributions, appliances, or hardware models beyond Linux and qla2xxx.
Exploitation context
No active exploitation is indicated. The record is not in KEV, and the supplied sources describe a kernel warning from an internal driver cleanup path rather than an attacker-controlled exploit path.
Researcher notes
Evidence is sparse: no CVSS, CWE, exploitability analysis, or distribution-specific fixed package data is provided. The source bundle supports driver-path validation and patch tracking, but not claims of privilege escalation, denial of service severity, or remote reachability.
Mitigation direction
- Identify systems running affected Linux kernels with qla2xxx loaded.
- Update to a kernel containing the referenced stable fixes.
- Check distribution vendor advisories for backported kernel packages.
- Prioritize storage hosts where qla2xxx warnings affect reliability.
- Monitor kernel logs for qla2xxx warnings during maintenance.
Validation and detection
- Check running kernel versions against vendor fixed packages.
- Confirm whether the qla2xxx module is loaded on each host.
- Review kernel logs for the named qla2x00_async_adisc_sp_done warning.
- Verify remediation by confirming updated kernel build provenance.
- Track vendor advisories because source severity is incomplete.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-49158 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/c7e01292eb8499ef044737fd2ba37d033552167cCVE reference, Linux
- https://git.kernel.org/stable/c/7a3457777c4f700c64836e78dc71e6ce459f62b8CVE reference, Linux
- https://git.kernel.org/stable/c/b13baf97ddbc1a7e7536168383bc0d84c2204b03CVE reference, Linux
- https://git.kernel.org/stable/c/d8fb8da69e194e0249b3cdb746ef09ce823ae26bCVE reference, Linux
- https://git.kernel.org/stable/c/64f24af75b79cba3b86b0760e27e0fa904db570fCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.