PT-2024-5795 · Linux+3 · Linux Kernel+3
Ivan Vecera
·
Published
2024-07-16
·
Updated
2024-08-16
·
CVE-2022-48840
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a hang during reboot or shutdown in the Linux kernel. This is caused by a wait-loop added at the beginning of the
iavf remove() function to ensure port initialization is finished before unregistering the net device. When the iavf shutdown() callback is called, it detaches the device, sets it down if running, and changes its state to IAVF REMOVE. Later, the shutdown callback of the associated PF driver (e.g., ice shutdown) is called, which indirectly calls iavf remove(), leading to an endless loop and a hang in the shutdown process. The patch fixes this by checking the adapter's state at the beginning of iavf remove() and skipping the rest of the function if the adapter is already in the remove state.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse