CVE-2024-42112: net: txgbe: free isb resources at the right time
In the Linux kernel, the following vulnerability has been resolved:
net: txgbe: free isb resources at the right time
When using MSI/INTx interrupt, the shared interrupts are still being handled in the device remove routine, before free IRQs. So isb memory is still read after it is freed. Thus move wxfreeisbresources() from txgbeclose() to txgberemove(). And fix the improper isb free action in txgbeopen() error handling path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42112?
CVE-2024-42112 is classified as a moderate severity vulnerability because it affects the Linux kernel's handling of interrupt resources.
How do I fix CVE-2024-42112?
To fix CVE-2024-42112, upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2024-42112?
CVE-2024-42112 affects certain versions of the Linux kernel, specifically those prior to the patched versions listed.
What specific part of the Linux kernel does CVE-2024-42112 impact?
CVE-2024-42112 impacts the handling of shared interrupts in the txgbe driver of the Linux kernel.
Can CVE-2024-42112 lead to a system crash?
Yes, CVE-2024-42112 has the potential to cause instability, impacting system performance or leading to crashes.