CVE-2022-49028: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49028 is a resource leak vulnerability in the Linux kernel's ixgbevf driver. The issue was discovered in the ixgbevf_init_module() function, which failed to destroy the workqueue created by create_singlethread_workqueue() when pci_register_driver() failed (Kernel Git).

The vulnerability exists in the ixgbevf driver's initialization module where a workqueue resource leak occurs when the PCI driver registration fails. The issue stems from the ixgbevf_init_module() function not properly cleaning up resources by failing to call destroy_workqueue() in the error path. This is similar to a previous fix implemented for the u132_hcd_init function (Kernel Git).

The vulnerability results in a resource leak in the Linux kernel when the ixgbevf driver initialization fails. This could potentially lead to system resource exhaustion over time (CVE Mitre).

The issue has been fixed by adding destroy_workqueue() in the fail path of ixgbevf_init_module(). The fix has been implemented in various Linux kernel versions, including Ubuntu 22.04 LTS (5.15.0-67.74), Ubuntu 20.04 LTS (5.15.0-1031.35~20.04.1), and other distributions (Ubuntu Security).