Lucene search

K
cveLinuxCVE-2024-46784
HistorySep 18, 2024 - 8:15 a.m.

CVE-2024-46784

2024-09-1808:15:05
Linux
web.nvd.nist.gov
7
linux kernel
vulnerability
mana
error handling
napi cleanup
hrtimer
kernel panic

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

16.4%

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Fix error handling in mana_create_txq/rxq’s NAPI cleanup

Currently napi_disable() gets called during rxq and txq cleanup,
even before napi is enabled and hrtimer is initialized. It causes
kernel panic.

? page_fault_oops+0x136/0x2b0
? page_counter_cancel+0x2e/0x80
? do_user_addr_fault+0x2f2/0x640
? refill_obj_stock+0xc4/0x110
? exc_page_fault+0x71/0x160
? asm_exc_page_fault+0x27/0x30
? __mmdrop+0x10/0x180
? __mmdrop+0xec/0x180
? hrtimer_active+0xd/0x50
hrtimer_try_to_cancel+0x2c/0xf0
hrtimer_cancel+0x15/0x30
napi_disable+0x65/0x90
mana_destroy_rxq+0x4c/0x2f0
mana_create_rxq.isra.0+0x56c/0x6d0
? mana_uncfg_vport+0x50/0x50
mana_alloc_queues+0x21b/0x320
? skb_dequeue+0x5f/0x80

Affected configurations

Vulners
Node
linuxlinux_kernelRange5.156.1.110
OR
linuxlinux_kernelRange6.2.06.6.51
OR
linuxlinux_kernelRange6.7.06.10.10
OR
linuxlinux_kernelRange6.11.0
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/microsoft/mana/mana_en.c",
      "include/net/mana/mana.h"
    ],
    "versions": [
      {
        "version": "e1b5683ff62e",
        "lessThan": "9178eb8ebcd8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e1b5683ff62e",
        "lessThan": "9e0bff4900b5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e1b5683ff62e",
        "lessThan": "4982a47154f0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e1b5683ff62e",
        "lessThan": "b6ecc6620376",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/microsoft/mana/mana_en.c",
      "include/net/mana/mana.h"
    ],
    "versions": [
      {
        "version": "5.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.15",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.110",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.51",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.10",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

16.4%

Related for CVE-2024-46784