cve-2024-42112
Vulnerability from cvelistv5
Published
2024-07-30 07:46
Modified
2024-11-05 09:37
Severity ?
Summary
net: txgbe: free isb resources at the right time
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b
Impacted products
Vendor Product Version
Linux Linux Version: 6.9
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:54:32.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42112",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:17:26.486889Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:06.438Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/wangxun/libwx/wx_lib.c",
            "drivers/net/ethernet/wangxun/ngbe/ngbe_main.c",
            "drivers/net/ethernet/wangxun/txgbe/txgbe_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "efdc3f542998",
              "status": "affected",
              "version": "aefd013624a1",
              "versionType": "git"
            },
            {
              "lessThan": "935124dd5883",
              "status": "affected",
              "version": "aefd013624a1",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/wangxun/libwx/wx_lib.c",
            "drivers/net/ethernet/wangxun/ngbe/ngbe_main.c",
            "drivers/net/ethernet/wangxun/txgbe/txgbe_main.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.9"
            },
            {
              "lessThan": "6.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: txgbe: free isb resources at the right time\n\nWhen using MSI/INTx interrupt, the shared interrupts are still being\nhandled in the device remove routine, before free IRQs. So isb memory\nis still read after it is freed. Thus move wx_free_isb_resources()\nfrom txgbe_close() to txgbe_remove(). And fix the improper isb free\naction in txgbe_open() error handling path."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-05T09:37:38.767Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b"
        },
        {
          "url": "https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9"
        }
      ],
      "title": "net: txgbe: free isb resources at the right time",
      "x_generator": {
        "engine": "bippy-9e1c9544281a"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42112",
    "datePublished": "2024-07-30T07:46:06.237Z",
    "dateReserved": "2024-07-29T15:50:41.176Z",
    "dateUpdated": "2024-11-05T09:37:38.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-42112\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-30T08:15:03.640\",\"lastModified\":\"2024-11-21T09:33:37.650\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: txgbe: free isb resources at the right time\\n\\nWhen using MSI/INTx interrupt, the shared interrupts are still being\\nhandled in the device remove routine, before free IRQs. So isb memory\\nis still read after it is freed. Thus move wx_free_isb_resources()\\nfrom txgbe_close() to txgbe_remove(). And fix the improper isb free\\naction in txgbe_open() error handling path.\"},{\"lang\":\"es\",\"value\":\" En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: txgbe: recursos isb libres en el momento adecuado Cuando se utiliza la interrupci\u00f3n MSI/INTx, las interrupciones compartidas todav\u00eda se manejan en la rutina de eliminaci\u00f3n del dispositivo, antes de las IRQ libres. Por lo tanto, la memoria isb todav\u00eda se lee despu\u00e9s de liberarla. Por lo tanto, mueva wx_free_isb_resources() de txgbe_close() a txgbe_remove(). Y corrija la acci\u00f3n gratuita de isb incorrecta en la ruta de manejo de errores txgbe_open().\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.