Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-36021
HistoryMay 30, 2024 - 2:59 p.m.

CVE-2024-36021 net: hns3: fix kernel crash when devlink reload during pf initialization

2024-05-3014:59:45
Linux
github.com
linux kernel
vulnerability
net
hns3
fix
kernel crash
devlink reload
pf initialization
hardware resources
register operation
devl_lock

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix kernel crash when devlink reload during pf initialization

The devlink reload process will access the hardware resources,
but the register operation is done before the hardware is initialized.
So, processing the devlink reload during initialization may lead to kernel
crash. This patch fixes this by taking devl_lock during initialization.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c"
    ],
    "versions": [
      {
        "version": "b741269b2759",
        "lessThan": "50b69054f455",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b741269b2759",
        "lessThan": "1b550dae5590",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b741269b2759",
        "lessThan": "7ca0f73e5e2d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "b741269b2759",
        "lessThan": "93305b77ffcb",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c"
    ],
    "versions": [
      {
        "version": "5.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.15",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.85",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.26",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.5",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

Related for VULNRICHMENT:CVE-2024-36021