PT-2024-5795 · Linux+3 · Linux Kernel+3

Ivan Vecera

·

Published

2024-07-16

·

Updated

2024-08-16

·

CVE-2022-48840

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a hang during reboot or shutdown in the Linux kernel. This is caused by a wait-loop added at the beginning of the iavf remove() function to ensure port initialization is finished before unregistering the net device. When the iavf shutdown() callback is called, it detaches the device, sets it down if running, and changes its state to IAVF REMOVE. Later, the shutdown callback of the associated PF driver (e.g., ice shutdown) is called, which indirectly calls iavf remove(), leading to an endless loop and a hang in the shutdown process. The patch fixes this by checking the adapter's state at the beginning of iavf remove() and skipping the rest of the function if the adapter is already in the remove state.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-06528
CVE-2022-48840
OPENSUSE-SU-2024_2947-1
SUSE-SU-2024:2894-1
SUSE-SU-2024:2902-1
SUSE-SU-2024:2929-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2947-1

Affected Products

Astra Linux
Linux Kernel
Red Os
Suse