Lucene search

K
cveLinuxCVE-2024-44995
HistorySep 04, 2024 - 8:15 p.m.

CVE-2024-44995

2024-09-0420:15:08
CWE-667
Linux
web.nvd.nist.gov
122
linux kernel
hns3
deadlock

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

0

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix a deadlock problem when config TC during resetting

When config TC during the reset process, may cause a deadlock, the flow is
as below:
pf reset start



setup tc │
│ ▼
▼ DOWN: napi_disable()
napi_disable()(skip) │
│ │
▼ ▼
… …
│ │
▼ │
napi_enable() │

UINIT: netif_napi_del()





INIT: netif_napi_add()


… global reset start
│ │
▼ ▼
UP: napi_enable()(skip) …
│ │
▼ ▼
… napi_disable()

In reset process, the driver will DOWN the port and then UINIT, in this
case, the setup tc process will UP the port before UINIT, so cause the
problem. Adds a DOWN process in UINIT to fix it.

Affected configurations

Nvd
Vulners
Node
linuxlinux_kernelRange4.155.4.283
OR
linuxlinux_kernelRange5.55.10.225
OR
linuxlinux_kernelRange5.115.15.166
OR
linuxlinux_kernelRange5.166.1.107
OR
linuxlinux_kernelRange6.26.6.48
OR
linuxlinux_kernelRange6.76.10.7
OR
linuxlinux_kernelMatch6.11rc1
OR
linuxlinux_kernelMatch6.11rc2
OR
linuxlinux_kernelMatch6.11rc3
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/hisilicon/hns3/hns3_enet.c"
    ],
    "versions": [
      {
        "version": "bb6b94a896d4",
        "lessThan": "67492d4d105c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bb6b94a896d4",
        "lessThan": "fc250eca15bd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bb6b94a896d4",
        "lessThan": "195918217448",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bb6b94a896d4",
        "lessThan": "6ae2b7d63cd0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bb6b94a896d4",
        "lessThan": "fa1d4de7265c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bb6b94a896d4",
        "lessThan": "de37408d5c26",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "bb6b94a896d4",
        "lessThan": "be5e816d00a5",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/hisilicon/hns3/hns3_enet.c"
    ],
    "versions": [
      {
        "version": "4.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.15",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.283",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.225",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.166",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.107",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.48",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.7",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

0

Percentile

5.1%