Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42116
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42116 igc: fix a log entry using uninitialized netdev

2024-07-3007:46:08
Linux
github.com
linux kernel
vulnerability
igc
fix
log entry
uninitialized netdev
igc_ptp_init
register_netdev
media autosense check
igb
cve-2024-42116

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

igc: fix a log entry using uninitialized netdev

During successful probe, igc logs this:

[ 5.133667] igc 0000:01:00.0 (unnamed net_device) (uninitialized): PHC added
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The reason is that igc_ptp_init() is called very early, even before
register_netdev() has been called. So the netdev_info() call works
on a partially uninitialized netdev.

Fix this by calling igc_ptp_init() after register_netdev(), right
after the media autosense check, just as in igb. Add a comment,
just as in igb.

Now the log message is fine:

[ 5.200987] igc 0000:01:00.0 eth0: PHC added

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial