Repeated Call to hns3_nic_net_open in net: hns3
Summary
GSD-2021-1001645: net: hns3: do not allow call hns3_nic_net_open repeatedly. Affects Kernel versions >= e888402789b9db5de4fcda361331d66dbf0cd9fd, < f8ba689cb69523144d10606096ef686002dd7285. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: hns3 package is a component of the Linux Kernel that provides support for the Huawei HiSilicon Network Subsystem 3 (HNS3) Ethernet controller. It enables network connectivity and communication for systems utilizing this specific hardware. The hns3_nic_net_open function within the package is responsible for initializing the network device and enabling network operations.
Vulnerability Detail
The vulnerability identified in net: hns3 involves the repeated invocation of the hns3_nic_net_open function. This issue allows for the potential execution of unintended or redundant operations, leading to resource wastage and potential instability. While the exact impact and attack vectors have not been proven, it is crucial to address this vulnerability to ensure optimal performance and stability of the network subsystem.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, developers can modify the code to include a check before calling hns3_nic_net_open to ensure it is not invoked repeatedly. Here is an example of how this can be done:
if (!net_device->initialized) {
hns3_nic_net_open(net_device);
net_device->initialized = true;
}
Conclusion
The vulnerability in net: hns3 that allows for the repeated invocation of hns3_nic_net_open can lead to resource wastage and potential instability. It is crucial to update the Linux Kernel to version v5.10.71 or later to fix this vulnerability. Alternatively, developers can implement the provided workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net: hns3 package is a component of the Linux Kernel that provides support for the Huawei HiSilicon Network Subsystem 3 (HNS3) Ethernet controller. It enables network connectivity and communication for systems utilizing this specific hardware.
hns3_nic_net_open is a function within the net: hns3 package that is responsible for initializing the network device and enabling network operations.
The exact impact of the vulnerability is not yet proven. However, the repeated invocation of hns3_nic_net_open can lead to resource wastage and potential instability in the network subsystem.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.71 or later, which includes the necessary fix. Alternatively, developers can implement the provided workaround to prevent repeated invocations of hns3_nic_net_open.
For more information about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
