In the Linux kernel, the following vulnerability has been resolved: eth: sungem: remove .ndo_poll_controller to avoid deadlocks Erhard reports netpoll warnings from sungem: netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll (gem_start_xmit+0x0/0x398) WARNING: CPU: 1 PID: 1 at net/core/netpoll.c:370 netpoll_send_skb+0x1fc/0x20c gem_poll_controller() disables interrupts, which may sleep. We can't sleep in netpoll, it has interrupts disabled completely. Strangely, gem_poll_controller() doesn't even poll the completions, and instead acts as if an interrupt has fired so it just schedules NAPI and exits. None of this has been necessary for years, since netpoll invokes NAPI directly.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/476adb3bbbd7886e8251d3b9ce2d3c3e680f35d6 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/5de5aeb98f9a000adb0db184e32765e4815d860b cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/6400d205fbbcbcf9b8510157e1f379c1d7e2e937 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/ac0a230f719b02432d8c7eba7615ebd691da86f4 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/e22b23f5888a065d084e87db1eec639c445e677f cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/faf94f1eb8a34b2c31b2042051ef36f63420ecce cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/fbeeb55dbb33d562149c57e794f06b7414e44289 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024061956-CVE-2024-38597-ad49@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-38597 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-38597 cve-icon
History

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 27 Aug 2024 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-667
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-19T13:45:46.642Z

Updated: 2024-09-11T17:34:54.536Z

Reserved: 2024-06-18T19:36:34.932Z

Link: CVE-2024-38597

cve-icon Vulnrichment

Updated: 2024-08-02T04:12:25.802Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-19T14:15:19.730

Modified: 2024-08-27T18:36:47.313

Link: CVE-2024-38597

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-19T00:00:00Z

Links: CVE-2024-38597 - Bugzilla