In the Linux kernel, the following vulnerability has been resolved:
ice: Add netif_device_attach/detach into PF reset flow
Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen below.
Reproduction steps: Once the driver is fully initialized, trigger reset: # echo 1 > /sys/class/net/<interface>/device/reset when reset is in progress try to get coalesce settings using ethtool: # ethtool -c <interface>
BUG: kernel NULL pointer dereference, address: 0000000000000020 PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP PTI CPU: 11 PID: 19713 Comm: ethtool Tainted: G S 6.10.0-rc7+ #7 RIP: 0010:ice_get_q_coalesce+0x2e/0xa0 [ice] RSP: 0018:ffffbab1e9bcf6a8 EFLAGS: 00010206 RAX: 000000000000000c RBX: ffff94512305b028 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff9451c3f2e588 RDI: ffff9451c3f2e588 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: ffff9451c3f2e580 R11: 000000000000001f R12: ffff945121fa9000 R13: ffffbab1e9bcf760 R14: 0000000000000013 R15: ffffffff9e65dd40 FS: 00007faee5fbe740(0000) GS:ffff94546fd80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 0000000106c2e005 CR4: 00000000001706f0 Call Trace: <TASK> ice_get_coalesce+0x17/0x30 [ice] coalesce_prepare_data+0x61/0x80 ethnl_default_doit+0xde/0x340 genl_family_rcv_msg_doit+0xf2/0x150 genl_rcv_msg+0x1b3/0x2c0 netlink_rcv_skb+0x5b/0x110 genl_rcv+0x28/0x40 netlink_unicast+0x19c/0x290 netlink_sendmsg+0x222/0x490 __sys_sendto+0x1df/0x1f0 __x64_sys_sendto+0x24/0x30 do_syscall_64+0x82/0x160 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7faee60d8e27
Calling netif_device_detach() before reset makes the net core not call the driver when ethtool command is issued, the attempt to execute an ethtool command during reset will result in the following message:
netlink error: No such device
instead of NULL pointer dereference. Once reset is done and ice_rebuild() is executing, the netif_device_attach() is called to allow for ethtool operations to occur again in a safe manner.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Dec 12, 2024 | Sep 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Dec 12, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2025 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optional | Dec 5, 2025 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-intelUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-186-generic | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub