Lucene search

K
osvGoogleOSV:CVE-2024-36887
HistoryMay 30, 2024 - 4:15 p.m.

CVE-2024-36887

2024-05-3016:15:00
Google
osv.dev
linux kernel
vulnerability
e1000e
usleep_range
udelay
phy mdic access
kernel panic
cable disconnection
vpro systems
software

AI Score

6.4

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved: e1000e: change usleep_range to udelay in PHY mdic access This is a partial revert of commit 6dbdd4de0362 (“e1000e: Workaround for sporadic MDI error on Meteor Lake systems”). The referenced commit used usleep_range inside the PHY access routines, which are sometimes called from an atomic context. This can lead to a kernel panic in some scenarios, such as cable disconnection and reconnection on vPro systems. Solve this by changing the usleep_range calls back to udelay.