Security readout for executives and security teams
Plain-English summary
This is a Linux kernel networking bug in the bgmac driver that can crash the kernel when queue accounting becomes inconsistent during interrupt handling. The evidence supports denial-of-service risk on systems using this driver, not data theft or code execution. No active exploitation is identified in the provided sources.
Executive priority
Handle through normal kernel patch governance unless affected bgmac-based systems are critical or exposed to heavy network traffic. Business risk is primarily service interruption from a kernel crash, with no sourced evidence of active exploitation or confidentiality impact.
Technical view
The flaw is a race in bgmac TX queue accounting: an RX interrupt between ring->end update and netdev_sent_queue() can make bgmac_dma_tx_free() miscalculate completed bytes, triggering BUG_ON in dql_completed(). The report was observed on a v4.14 RT ARM system and described as present in mainline.
Likely exposure
Exposure appears limited to Linux systems using the bgmac network driver, commonly tied to Broadcom Gigabit MAC hardware. Systems without this driver or hardware are unlikely exposed. Version data in the bundle is incomplete and commit-oriented, so teams should map their kernel branch against vendor fixed kernels or the referenced stable commits.
Exploitation context
The source bundle provides no KEV listing and no cited evidence of active exploitation. The known trigger is an operational driver race during network interrupt processing. Remote exploitability is not established by the provided sources, so treat this as a potential availability issue until vendor advisories clarify reachability.
Researcher notes
Do not assume broad Linux exposure. Focus on bgmac driver presence, kernel lineage, and whether downstream vendors backported one of the stable fixes. The CVE data lacks CVSS, CWE, and a clear vulnerable version range, so confidence depends on local kernel mapping.
Mitigation direction
- Identify systems running Linux kernels with the bgmac driver enabled or loaded.
- Compare deployed kernel branches against the referenced stable kernel fixes.
- Apply vendor or distribution kernel updates that include the bgmac bytes_compl fix.
- Prioritize embedded, appliance, and Broadcom-based network-facing systems using bgmac.
- If no update is available, follow vendor guidance for driver or kernel workarounds.
Validation and detection
- Check whether bgmac is built, loaded, or active on target systems.
- Review kernel package changelogs for CVE-2022-50062 or the referenced stable commits.
- Inspect crash logs for dql_completed, bgmac_poll, or bgmac_dma_tx_free BUG/Oops traces.
- Confirm updated systems boot the fixed kernel and retain expected network functionality.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-50062 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/ac6d4482f29ab992b605c1b4bd1347f1f679f4e4CVE reference, Linux
- https://git.kernel.org/stable/c/ab2b55bb25db289ba0b68e3d58494476bdb1041dCVE reference, Linux
- https://git.kernel.org/stable/c/c506c9a97120f43257e9b3ce7b1f9a24eafc3787CVE reference, Linux
- https://git.kernel.org/stable/c/da1421a29d3b8681ba6a7f686bd0b40dda5acaf3CVE reference, Linux
- https://git.kernel.org/stable/c/1b7680c6c1f6de9904f1d9b05c952f0c64a03350CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.