CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash when devlink reload during initialization
The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the devlink reload during initialization may lead to kernel crash.
This patch fixes this by registering the devlink after hardware initialization.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36900?
CVE-2024-36900 has been classified with a high severity due to its potential to cause kernel crashes during devlink reload processes.
How do I fix CVE-2024-36900?
To fix CVE-2024-36900, update the Linux kernel to one of the following versions: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What software is affected by CVE-2024-36900?
CVE-2024-36900 affects the Linux kernel versions listed in the remedy section under Debian.
Can CVE-2024-36900 lead to system instability?
Yes, CVE-2024-36900 can lead to system instability by causing kernel crashes if devlink is reloaded improperly.
When was CVE-2024-36900 disclosed?
CVE-2024-36900 was disclosed in 2024 and addresses a critical issue in the Linux kernel.