CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM
First published: Tue Nov 19 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ice: fix crash on probe for DPLL enabled E810 LOM The E810 Lan On Motherboard (LOM) design is vendor specific. Intel provides the reference design, but it is up to vendor on the final product design. For some cases, like Linux DPLL support, the static values defined in the driver does not reflect the actual LOM design. Current implementation of dpll pins is causing the crash on probe of the ice driver for such DPLL enabled E810 LOM designs: WARNING: (...) at drivers/dpll/dpll_core.c:495 dpll_pin_get+0x2c4/0x330 ... Call Trace: <TASK> ? __warn+0x83/0x130 ? dpll_pin_get+0x2c4/0x330 ? report_bug+0x1b7/0x1d0 ? handle_bug+0x42/0x70 ? exc_invalid_op+0x18/0x70 ? asm_exc_invalid_op+0x1a/0x20 ? dpll_pin_get+0x117/0x330 ? dpll_pin_get+0x2c4/0x330 ? dpll_pin_get+0x117/0x330 ice_dpll_get_pins.isra.0+0x52/0xe0 [ice] ... The number of dpll pins enabled by LOM vendor is greater than expected and defined in the driver for Intel designed NICs, which causes the crash. Prevent the crash and allow generic pin initialization within Linux DPLL subsystem for DPLL enabled E810 LOM designs. Newly designed solution for described issue will be based on "per HW design" pin initialization. It requires pin information dynamically acquired from the firmware and is already in progress, planned for next-tree only.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=6.7<6.11.7 | |
| Linux Kernel | =6.12-rc1 | |
| Linux Kernel | =6.12-rc2 | |
| Linux Kernel | =6.12-rc3 | |
| Linux Kernel | =6.12-rc4 | |
| Linux Kernel | =6.12-rc5 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/82b107a27bab29146e159b6b9f21146c97c45a53
- https://git.kernel.org/stable/c/6e58c33106220c6c0c8fbee9ab63eae76ad8f260
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53048
- https://nvd.nist.gov/vuln/detail/CVE-2024-53048
- https://launchpad.net/bugs/cve/CVE-2024-53048
- https://security-tracker.debian.org/tracker/CVE-2024-53048
- https://ubuntu.com/security/CVE-2024-53048
- https://git.kernel.org/linus/6e58c33106220c6c0c8fbee9ab63eae76ad8f260
Frequently Asked Questions
What is the severity of CVE-2024-53048?
The severity of CVE-2024-53048 is considered moderate, primarily affecting the stability of the Linux kernel during specific scenarios.
How do I fix CVE-2024-53048?
To fix CVE-2024-53048, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2024-53048?
CVE-2024-53048 affects Linux kernel versions from 6.7 to 6.11.7 and specific release candidates of version 6.12.
What is the impact of CVE-2024-53048?
The impact of CVE-2024-53048 can lead to system crashes during probe operations for specific lan on motherboard configurations.
Is CVE-2024-53048 specific to certain hardware?
Yes, CVE-2024-53048 is related to the E810 Lan On Motherboard (LOM) design, which varies by vendor.
- agent/title
- agent/first-publish-date
- agent/type
- agent/author
- agent/severity
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/usn-cve
- source/Ubuntu
- collector/launchpad-cve
- source/Launchpad
- collector/security-tracker-debian
- source/Debian
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- vendor/linux
- canonical/linux kernel
- version/linux kernel/6.7
- version/linux kernel/6.12-rc1
- version/linux kernel/6.12-rc2
- version/linux kernel/6.12-rc3
- version/linux kernel/6.12-rc4
- version/linux kernel/6.12-rc5
- package-manager/debian