CVE-2024-46784: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix error handling in manacreatetxq/rxq's NAPI cleanup
Currently napidisable() gets called during rxq and txq cleanup, even before napi is enabled and hrtimer is initialized. It causes kernel panic.
? pagefaultoops+0x136/0x2b0 ? pagecountercancel+0x2e/0x80 ? douseraddrfault+0x2f2/0x640 ? refillobjstock+0xc4/0x110 ? excpagefault+0x71/0x160 ? asmexcpagefault+0x27/0x30 ? mmdrop+0x10/0x180 ? mmdrop+0xec/0x180 ? hrtimeractive+0xd/0x50 hrtimertrytocancel+0x2c/0xf0 hrtimercancel+0x15/0x30 napidisable+0x65/0x90 manadestroyrxq+0x4c/0x2f0 manacreaterxq.isra.0+0x56c/0x6d0 ? manauncfgvport+0x50/0x50 manaallocqueues+0x21b/0x320 ? skbdequeue+0x5f/0x80
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46784?
CVE-2024-46784 is classified as high severity due to the potential for kernel panic resulting from improper error handling in NAPI cleanup.
How do I fix CVE-2024-46784?
To resolve CVE-2024-46784, upgrade to the patched versions of the Linux Kernel: 5.10.223-1, 6.1.119-1~deb11u1, or later versions.
Which versions of the Linux kernel are affected by CVE-2024-46784?
CVE-2024-46784 affects Linux Kernel versions from 5.15 to 6.1.110 and versions 6.2 to 6.6.51, and 6.7 to 6.10.10.
What causes the kernel panic associated with CVE-2024-46784?
The kernel panic is triggered because napi_disable() is called during the cleanup of rxq and txq before napi is enabled and hrtimer is initialized.
What is the context of the CVE-2024-46784 vulnerability?
CVE-2024-46784 pertains to error handling issues in the Linux kernel's network driver framework, specifically within the mana driver.