Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-36900
HistoryMay 30, 2024 - 3:29 p.m.

CVE-2024-36900 net: hns3: fix kernel crash when devlink reload during initialization

2024-05-3015:29:03
Linux
github.com
linux kernel
vulnerability
hns3
hardware resources
devlink reload
initialization
kernel crash
patch

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix kernel crash when devlink reload during initialization

The devlink reload process will access the hardware resources,
but the register operation is done before the hardware is initialized.
So, processing the devlink reload during initialization may lead to kernel
crash.

This patch fixes this by registering the devlink after
hardware initialization.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c",
      "drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c"
    ],
    "versions": [
      {
        "version": "cd6242991d2e",
        "lessThan": "72ede790f5a0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cd6242991d2e",
        "lessThan": "5c623fe05348",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cd6242991d2e",
        "lessThan": "c98bc78ce090",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cd6242991d2e",
        "lessThan": "35d92abfbad8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c",
      "drivers/net/ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c"
    ],
    "versions": [
      {
        "version": "5.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.15",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.91",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.31",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.10",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

Related for VULNRICHMENT:CVE-2024-36900