In the Linux kernel, the following vulnerability has been resolved:
ice: Add netif_device_attach/detach into PF reset flow
Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen below.
Reproduction steps: Once the driver is fully initialized, trigger reset: # echo 1 > /sys/class/net/<interface>/device/reset when reset is in progress try to get coalesce settings using ethtool: # ethtool -c <interface>
BUG: kernel NULL pointer dereference, address: 0000000000000020 PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP PTI CPU: 11 PID: 19713 Comm: ethtool Tainted: G S 6.10.0-rc7+ #7 RIP: 0010:ice_get_q_coalesce+0x2e/0xa0 [ice] RSP: 0018:ffffbab1e9bcf6a8 EFLAGS: 00010206 RAX: 000000000000000c RBX: ffff94512305b028 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff9451c3f2e588 RDI: ffff9451c3f2e588 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: ffff9451c3f2e580 R11: 000000000000001f R12: ffff945121fa9000 R13: ffffbab1e9bcf760 R14: 0000000000000013 R15: ffffffff9e65dd40 FS: 00007faee5fbe740(0000) GS:ffff94546fd80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 0000000106c2e005 CR4: 00000000001706f0 Call Trace: <TASK> ice_get_coalesce+0x17/0x30 [ice] coalesce_prepare_data+0x61/0x80 ethnl_default_doit+0xde/0x340 genl_family_rcv_msg_doit+0xf2/0x150 genl_rcv_msg+0x1b3/0x2c0 netlink_rcv_skb+0x5b/0x110 genl_rcv+0x28/0x40 netlink_unicast+0x19c/0x290 netlink_sendmsg+0x222/0x490 __sys_sendto+0x1df/0x1f0 __x64_sys_sendto+0x24/0x30 do_syscall_64+0x82/0x160 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7faee60d8e27
Calling netif_device_detach() before reset makes the net core not call the driver when ethtool command is issued, the attempt to execute an ethtool command during reset will result in the following message:
netlink error: No such device
instead of NULL pointer dereference. Once reset is done and ice_rebuild() is executing, the netif_device_attach() is called to allow for ethtool operations to occur again in a safe manner.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Dec 12, 2024 | Sep 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Dec 12, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2025 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade cluster-md-kmp-azure | Dec 5, 2025 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-awsUpgrade linux-image-intelUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-kvm-5.15Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibm-lts-24.04 | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub