Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Robert Elliott

Researcher fromHPE
#33984of 53,632
7.8Total CVSS
Vulnerabilities · 1
PT-2024-8418
7.8
2024-03-25
Linux · Linux Kernel · CVE-2024-35911
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.1.77 **Description** The vulnerability is related to a memory corruption bug in the ice driver, which can cause the kernel to panic after suspend. The issue arises from the driver calling the `ice vsi free q vectors()` function by itself when suspending, leading to a zero-length buffer allocation and subsequent memory corruption. The fix involves ensuring that all code referencing `num q vectors` does so after it has been reset via `ice vsi cfg def()`. **Recommendations** To resolve the issue, update the Linux kernel to a version later than 6.1.77, which includes the fix for the memory corruption bug. As a temporary workaround, consider disabling the `ice vsi rebuild set coalesce()` function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.