hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.24 % · centile 15 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as the register call is received before netvsc_probe is finished. This is because we register register_netdevice_notifier() very early( even before vmbus_driver_register()). To fix this, we try to register each such matching VF( if it is visible as a netdevice) at the end of netvsc_probe.
Références
- https://git.kernel.org/stable/c/bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d
- https://git.kernel.org/stable/c/c7441c77c91e47f653104be8353b44a3366a5366
- https://git.kernel.org/stable/c/5b10a88f64c0315cfdef45de0aaaa4eef57de0b7
- https://git.kernel.org/stable/c/b6d46f306b3964d05055ddaa96b58cd8bd3a472c
- https://git.kernel.org/stable/c/309ef7de5d840e17607e7d65cbf297c0564433ef
- https://git.kernel.org/stable/c/a71302c8638939c45e4ba5a99ea438185fd3f418
- https://git.kernel.org/stable/c/4d29a58d96a78728cb01ee29ed70dc4bd642f135
- https://git.kernel.org/stable/c/9cae43da9867412f8bd09aee5c8a8dc5e8dc3dc2
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2024-24082
- GCVE · GCVE-0-2024-26820
Avis du CERT-FR
- CERTFR-2024-AVI-0958 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0667 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0645 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0633 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0611 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0580 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0546 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0527 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0420 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0381 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.301 < 4.19.310cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.263 < 5.4.272cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.203 < 5.10.213cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.141 < 5.15.152cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.65 < 6.1.79cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.4 < 6.6.18cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.7.6cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 028aa21f9e92536038cabb834c15d08f5c894382 < bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d ; affected 997d895fa495fb3421983923219bba93f1a793ee < c7441c77c91e47f653104be8353b44a3366a5366 ; affected ff6c130e48a79c826cbc2427bd8b34a7592460cc < 5b10a88f64c0315cfdef45de0aaaa4eef57de0b7 ; affected 97683466e24c801ee4e865ce90ac7e355db2da59 < b6d46f306b3964d05055ddaa96b58cd8bd3a472c ; affected 5dd83db613be8e5c5d30efed7f42780e9eb18380 < 309ef7de5d840e17607e7d65cbf297c0564433ef ; affected 7350c460f7f48a8653a15c5c90fc9070aaa29535 < a71302c8638939c45e4ba5a99ea438185fd3f418 |
| Linux · Linux | affected 6.7 ; unaffected 0 < 6.7 ; unaffected 4.19.310 ≤ 4.19.* ; unaffected 5.4.272 ≤ 5.4.* ; unaffected 5.10.213 ≤ 5.10.* ; unaffected 5.15.152 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |