CVE-2024-36021: net: hns3: fix kernel crash when devlink reload during pf initialization
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash when devlink reload during pf initialization
The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the devlink reload during initialization may lead to kernel crash. This patch fixes this by taking devllock during initialization.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36021?
CVE-2024-36021 is classified as a potentially critical vulnerability due to the risk of kernel crashes during device initialization.
How do I fix CVE-2024-36021?
To fix CVE-2024-36021, update the Linux kernel to one of the patched versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2024-36021?
CVE-2024-36021 affects systems running specific versions of the Linux kernel, primarily in Debian distributions.
What causes the vulnerability in CVE-2024-36021?
CVE-2024-36021 is caused by the devlink reload process accessing hardware resources prior to the hardware initialization.
Is there a known exploit for CVE-2024-36021?
As of now, there are no publicly disclosed exploits specifically targeting CVE-2024-36021.