i40e: Fix call trace in setup_tx_descriptors
Summary
GSD-2022-1004654: i40e: Fix call trace in setup_tx_descriptors. Affects Kernel versions >= e17bc411aea8fbebc51857037f104ab09f765120, < 814092927a215f5ca6c08249ec72a205e0b473cd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The i40e package is a driver for Intel Ethernet Connection X710/XL710 devices. It is responsible for managing the network interface and facilitating data transmission. The setup_tx_descriptors function is a critical component of this package, as it sets up the transmit descriptors for sending data packets. However, a vulnerability has been discovered in this function that can lead to a call trace, potentially impacting the stability and performance of the network interface.
Vulnerability Detail
The vulnerability in the i40e package arises from a call trace issue in the setup_tx_descriptors function. When this function is invoked, it can trigger a call trace, which is a record of the function call stack. This call trace can disrupt the normal execution flow and result in unexpected behavior or system instability. While the exact impact and attack vectors have not been proven, the presence of a call trace indicates a potential security vulnerability that could be exploited by an attacker.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The i40e package in the Linux Kernel is vulnerable to a call trace issue in the setup_tx_descriptors function. This vulnerability can potentially lead to system instability and unexpected behavior. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.10.124 or later. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The i40e package is a driver for Intel Ethernet Connection X710/XL710 devices. It is responsible for managing the network interface and facilitating data transmission.
The setup_tx_descriptors function is a critical component of the i40e package. It is responsible for setting up the transmit descriptors for sending data packets.
A call trace is a record of the function call stack. It provides information about the sequence of function calls that led to the current point in the code execution.
The exact impacts of this vulnerability have not been proven. However, a call trace can disrupt the normal execution flow and result in unexpected behavior or system instability.
To fix this vulnerability, update the Linux Kernel to version v5.10.124 or later, which includes the necessary fix for the call trace issue in the setup_tx_descriptors function.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
