In the Linux kernel, the following vulnerability has been resolved:
igb: Do not bring the device up after non-fatal error
Commit 004d25060c78 ("igb: Fix igb_down hung on surprise removal") changed igb_io_error_detected() to ignore non-fatal pcie errors in order to avoid hung task that can happen when igb_down() is called multiple times. This caused an issue when processing transient non-fatal errors. igb_io_resume(), which is called after igb_io_error_detected(), assumes that device is brought down by igb_io_error_detected() if the interface is up. This resulted in panic with stacktrace below.
[ T3256] igb 0000:09:00.0 haeth0: igb: haeth0 NIC Link is Down [ T292] pcieport 0000:00:1c.5: AER: Uncorrected (Non-Fatal) error received: 0000:09:00.0 [ T292] igb 0000:09:00.0: PCIe Bus Error: severity=Uncorrected (Non-Fatal), type=Transaction Layer, (Requester ID) [ T292] igb 0000:09:00.0: device [8086:1537] error status/mask=00004000/00000000 [ T292] igb 0000:09:00.0: [14] CmpltTO [ 200.105524,009][ T292] igb 0000:09:00.0: AER: TLP Header: 00000000 00000000 00000000 00000000 [ T292] pcieport 0000:00:1c.5: AER: broadcast error_detected message [ T292] igb 0000:09:00.0: Non-correctable non-fatal error reported. [ T292] pcieport 0000:00:1c.5: AER: broadcast mmio_enabled message [ T292] pcieport 0000:00:1c.5: AER: broadcast resume message [ T292] ------------[ cut here ]------------ [ T292] kernel BUG at net/core/dev.c:6539! [ T292] invalid opcode: 0000 [#1] PREEMPT SMP [ T292] RIP: 0010:napi_enable+0x37/0x40 [ T292] Call Trace: [ T292] <TASK> [ T292] ? die+0x33/0x90 [ T292] ? do_trap+0xdc/0x110 [ T292] ? napi_enable+0x37/0x40 [ T292] ? do_error_trap+0x70/0xb0 [ T292] ? napi_enable+0x37/0x40 [ T292] ? napi_enable+0x37/0x40 [ T292] ? exc_invalid_op+0x4e/0x70 [ T292] ? napi_enable+0x37/0x40 [ T292] ? asm_exc_invalid_op+0x16/0x20 [ T292] ? napi_enable+0x37/0x40 [ T292] igb_up+0x41/0x150 [ T292] igb_io_resume+0x25/0x70 [ T292] report_resume+0x54/0x70 [ T292] ? report_frozen_detected+0x20/0x20 [ T292] pci_walk_bus+0x6c/0x90 [ T292] ? aer_print_port_info+0xa0/0xa0 [ T292] pcie_do_recovery+0x22f/0x380 [ T292] aer_process_err_devices+0x110/0x160 [ T292] aer_isr+0x1c1/0x1e0 [ T292] ? disable_irq_nosync+0x10/0x10 [ T292] irq_thread_fn+0x1a/0x60 [ T292] irq_thread+0xe3/0x1a0 [ T292] ? irq_set_affinity_notifier+0x120/0x120 [ T292] ? irq_affinity_notify+0x100/0x100 [ T292] kthread+0xe2/0x110 [ T292] ? kthread_complete_and_exit+0x20/0x20 [ T292] ret_from_fork+0x2d/0x50 [ T292] ? kthread_complete_and_exit+0x20/0x20 [ T292] ret_from_fork_asm+0x11/0x20 [ T292] </TASK>
To fix this issue igb_io_resume() checks if the interface is running and the device is not down this means igb_io_error_detected() did not bring the device down and there is no need to bring it up.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-tools-develUpgrade kernel-headers | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-56-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oemUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub