CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash problem in concurrent scenario
The Linux kernel CVE team has assigned CVE-2024-39507 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024071205-CVE-2024-39507-cbc6@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash problem in concurrent scenario
When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may uninit, then cause kernel crash.
To fix the problem, when link status change, need to check whether the roce registered, and when uninit, need to wait link update finish.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.162 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.95 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.35 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CVE-2024-39507 - Configuration
In the hns3 NIC driver, on link status change, notify the ROCE driver only after checking whether the ROCE driver is registered; during ROCE uninitialization, ensure the code path waits for the link update to finish to avoid the kernel crash in concurrent scenarios (CVE-2024-39507).
Linux kernel (net: hns3) roce registration check on link status change + wait for link update to finish during uninit = implement/enable logic to check whether the ROCE driver is registered; if ROCE is being uninitialized, wait until the link update process finishes before completing uninit/return
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39507?
CVE-2024-39507 has been categorized as a significant vulnerability due to its potential to cause kernel crashes in concurrent scenarios.
How do I fix CVE-2024-39507?
To address CVE-2024-39507, update to a fixed version of the Linux kernel, such as 5.15.162, 6.1.95, or later versions.
Which Linux kernel versions are affected by CVE-2024-39507?
CVE-2024-39507 affects specific versions of the Linux kernel, including versions up to and including 5.15.162 and 6.1.95.
What types of systems are impacted by CVE-2024-39507?
Systems running vulnerable versions of the Linux kernel, particularly in environments utilizing the hns3 network driver, are affected by CVE-2024-39507.
Is there any additional information available for CVE-2024-39507?
Yes, further details about CVE-2024-39507 can be found in the Linux kernel security advisories and updates.