CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM
In the Linux kernel, the following vulnerability has been resolved:
ice: fix crash on probe for DPLL enabled E810 LOM
The E810 Lan On Motherboard (LOM) design is vendor specific. Intel provides the reference design, but it is up to vendor on the final product design. For some cases, like Linux DPLL support, the static values defined in the driver does not reflect the actual LOM design. Current implementation of dpll pins is causing the crash on probe of the ice driver for such DPLL enabled E810 LOM designs:
WARNING: (...) at drivers/dpll/dpllcore.c:495 dpllpinget+0x2c4/0x330 ... Call Trace: <TASK> ? warn+0x83/0x130 ? dpllpinget+0x2c4/0x330 ? reportbug+0x1b7/0x1d0 ? handlebug+0x42/0x70 ? excinvalidop+0x18/0x70 ? asmexcinvalidop+0x1a/0x20 ? dpllpinget+0x117/0x330 ? dpllpinget+0x2c4/0x330 ? dpllpinget+0x117/0x330 icedpllgetpins.isra.0+0x52/0xe0 [ice] ...
The number of dpll pins enabled by LOM vendor is greater than expected and defined in the driver for Intel designed NICs, which causes the crash.
Prevent the crash and allow generic pin initialization within Linux DPLL subsystem for DPLL enabled E810 LOM designs.
Newly designed solution for described issue will be based on "per HW design" pin initialization. It requires pin information dynamically acquired from the firmware and is already in progress, planned for next-tree only.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53048?
The severity of CVE-2024-53048 is considered moderate, primarily affecting the stability of the Linux kernel during specific scenarios.
How do I fix CVE-2024-53048?
To fix CVE-2024-53048, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2024-53048?
CVE-2024-53048 affects Linux kernel versions from 6.7 to 6.11.7 and specific release candidates of version 6.12.
What is the impact of CVE-2024-53048?
The impact of CVE-2024-53048 can lead to system crashes during probe operations for specific lan on motherboard configurations.
Is CVE-2024-53048 specific to certain hardware?
Yes, CVE-2024-53048 is related to the E810 Lan On Motherboard (LOM) design, which varies by vendor.