CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix a deadlock problem when config TC during resetting
When config TC during the reset process, may cause a deadlock, the flow is as below: pf reset start │ ▼ ...... setup tc │ │ ▼ ▼ DOWN: napidisable() napidisable()(skip) │ │ │ ▼ ▼ ...... ...... │ │ ▼ │ napienable() │ ▼ UINIT: netifnapidel() │ ▼ ...... │ ▼ INIT: netifnapiadd() │ ▼ ...... global reset start │ │ ▼ ▼ UP: napienable()(skip) ...... │ │ ▼ ▼ ...... napidisable()
In reset process, the driver will DOWN the port and then UINIT, in this case, the setup tc process will UP the port before UINIT, so cause the problem. Adds a DOWN process in UINIT to fix it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44995?
CVE-2024-44995 has a moderate severity rating due to potential deadlock issues during the reset of network configurations.
How do I fix CVE-2024-44995?
To fix CVE-2024-44995, update your Linux kernel to version 5.10.226-1 or later.
Which Linux kernel versions are affected by CVE-2024-44995?
CVE-2024-44995 affects Linux kernel versions from 4.15 up to but not including 6.11-rc1.
Is there a patch available for CVE-2024-44995?
Yes, patches for CVE-2024-44995 are available in updated Linux kernel packages.
What could happen if CVE-2024-44995 is exploited?
Exploitation of CVE-2024-44995 could lead to a system deadlock when configuring traffic control during a network reset.