NULL Pointer Dereference in Linux Kernel's Ice Driver During Reset Process
Summary
CVE-2024-46770: In the Linux kernel, the following vulnerability has been resolved: ice: Add netif_device_attach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources,... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a widely used open-source operating system kernel that serves as the foundation for various operating systems, including Debian. It manages hardware resources and provides essential services for software applications. The ice driver is responsible for managing Intel Ethernet devices, facilitating network communication. This vulnerability arises when Ethtool callbacks are executed during the reset process of the ice driver, leading to potential system instability and crashes.
Vulnerability Detail
The vulnerability, identified as CVE-2024-46770, occurs in the ice driver of the Linux kernel. It allows Ethtool callbacks to be executed while the driver is in a reset state, which can lead to a NULL pointer dereference. This happens when an attempt is made to access deleted resources, such as coalesce settings, during the reset process. The technical details reveal that if a user triggers a reset and simultaneously tries to retrieve coalesce settings using the ethtool command, the kernel may dereference a NULL pointer, resulting in a crash. This vulnerability can compromise system stability and lead to denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid executing ethtool commands while the reset process is in progress. This can be done by ensuring that no ethtool commands are issued during the reset phase, which can be triggered by writing '1' to /sys/class/net/<interface>/device/reset. Instead, wait for the reset to complete before attempting to use ethtool.
Conclusion
CVE-2024-46770 is a critical vulnerability in the Linux kernel's ice driver that can lead to system crashes due to NULL pointer dereference during reset operations. Users should apply the recommended fixes and workarounds to ensure system stability and security.
See every vulnerability recorded for linux →
FAQ
CVE-2024-46770 is a vulnerability in the Linux kernel's ice driver that can lead to a NULL pointer dereference during the reset process when Ethtool commands are executed.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring installation.
The primary impact is system instability, which can lead to crashes and denial of service when the vulnerability is exploited.
Yes, a patch has been released in the latest versions of the Linux kernel. Users are encouraged to update their systems to mitigate this vulnerability.
If immediate updates are not possible, avoid executing ethtool commands during the reset process as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
