CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlocks
In the Linux kernel, the following vulnerability has been resolved:
net: fec: remove .ndopollcontroller to avoid deadlocks
There is a deadlock issue found in sungem driver, please refer to the commit ac0a230f719b ("eth: sungem: remove .ndopollcontroller to avoid deadlocks"). The root cause of the issue is that netpoll is in atomic context and disableirq() is called by .ndopollcontroller interface of sungem driver, however, disableirq() might sleep. After analyzing the implementation of fecpollcontroller(), the fec driver should have the same issue. Due to the fec driver uses NAPI for TX completions, the .ndopollcontroller is unnecessary to be implemented in the fec driver, so fecpollcontroller() can be safely removed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38553?
CVE-2024-38553 has a moderate severity level due to the potential for deadlocks affecting system stability.
How do I fix CVE-2024-38553?
To mitigate CVE-2024-38553, upgrade to the patched versions of the Linux kernel as specified in the advisory.
Which Linux kernel versions are affected by CVE-2024-38553?
CVE-2024-38553 affects Linux kernel versions prior to 5.10.223-1, among others.
What components are specifically impacted by CVE-2024-38553?
CVE-2024-38553 specifically impacts the sungem driver in the Linux kernel networking stack.
Is there a patch available for CVE-2024-38553?
Yes, patches for CVE-2024-38553 are available in the updated versions of the Linux kernel.