CVE-2024-36900

MEDIUM5.5

net: hns3: fix kernel crash when devlink reload during initialization

Published May 30, 2024

Modified 3 weeks ago

Details

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix kernel crash when devlink reload during initialization

The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the devlink reload during initialization may lead to kernel crash.

This patch fixes this by registering the devlink after hardware initialization.

References

WEB

https://git.kernel.org/stable/c/35d92abfbad88cf947c010baf34b075e40566095

WEB

https://git.kernel.org/stable/c/5c623fe0534806b627054da09b6f51b7b2f7b9cd

WEB

https://git.kernel.org/stable/c/72ede790f5a03c3957487400a1b72ebce293a2e7

WEB

https://git.kernel.org/stable/c/c98bc78ce0909ccc92005e2cb6609ec6c7942f69

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-36900

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMay 30, 2024

ModifiedMay 11, 2026