CVEvulnerability
CVE-2024-36021
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-30
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-908
Description
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash when devlink reload during pf initialization
The devlink reload process will access the hardware resources,
but the register operation is done before the hardware is initialized.
So, processing the devlink reload during initialization may lead to kernel
crash. This patch fixes this by taking devl_lock during initialization.
Affected configurations
• linux linux kernel (>= 5.15 < 6.1.85)
• linux linux kernel (>= 6.2 < 6.6.26)
• linux linux kernel (>= 6.7 < 6.8.5)
• linux linux kernel 6.9
Related
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- https://git.kernel.org/stable/c/1b550dae55901c2cc9075d6a7155a71b4f516e86 Patch
- https://git.kernel.org/stable/c/50b69054f455dcdb34bd6b22764c7579b270eef3 Patch
- https://git.kernel.org/stable/c/7ca0f73e5e2da3c129935b97f3a0877cce8ebdf5 Patch
- https://git.kernel.org/stable/c/93305b77ffcb042f1538ecc383505e87d95aa05a Patch
- https://git.kernel.org/stable/c/1b550dae55901c2cc9075d6a7155a71b4f516e86 Patch
- https://git.kernel.org/stable/c/50b69054f455dcdb34bd6b22764c7579b270eef3 Patch
- https://git.kernel.org/stable/c/7ca0f73e5e2da3c129935b97f3a0877cce8ebdf5 Patch
- https://git.kernel.org/stable/c/93305b77ffcb042f1538ecc383505e87d95aa05a Patch