Linux Kernel up to 6.11.7 idpf idpf_get_link_ksettings denial of service

Summaryinfo

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.11.7. This issue affects the function idpf_get_link_ksettings of the component idpf. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2024-50274. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.11.7. This affects the function idpf_get_link_ksettings of the component idpf. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpf_get_link_ksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and waits for the reset to complete. If the reset fails, it takes the error path and releases the vport lock. At this time if the monitoring tools tries to access link settings, it call traces for accessing released vport pointer. To avoid it, move link_speed_mbps to netdev_priv structure which removes the dependency on vport pointer and the vport lock in idpf_get_link_ksettings. Also use netif_carrier_ok() to check the link status and adjust the offsetof to use link_up instead of link_speed_mbps.

The advisory is shared at git.kernel.org. This vulnerability is uniquely identified as CVE-2024-50274 since 10/21/2024. The exploitability is told to be difficult. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 213018 (SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:4314-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 6.11.8 eliminates this vulnerability. Applying the patch fa4d906ad0fb/81d2fb4c7c18 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (213018) and CERT Bund (WID-SEC-2024-3497). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Affected

• Debian Linux
• Google Cloud Platform
• Amazon Linux 2
• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• Kyocera Printer
• IGEL OS
• Lenovo Computer
• Dell PowerEdge
• RESF Rocky Linux
• Dell NetWorker
• Dell Avamar
• IBM QRadar SIEM
• Red Hat OpenShift
• Open Source Linux Kernel
• IBM DataPower Gateway

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 6.11.0
• 6.11.1
• 6.11.2
• 6.11.3
• 6.11.4
• 6.11.5
• 6.11.6
• 6.11.7

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion