igb: Do not bring the device up after non-fatal error
In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error Commit 004d25060c78 ("igb: Fix igb_down hung on surprise removal") changed igb_io_error_detected() to ignore non-fatal pcie errors in order to avoid hung task that can happen when igb_down() is called multiple times. This caused an issue when processing transient non-fatal errors. igb_io_resume(), which is called after igb_io_error_detected(), assumes that device is brought down by igb_io_error_detected() if the interface is up. This resulted in panic with stacktrace below. [ T3256] igb 0000:09:00.0 haeth0: igb: haeth0 NIC Link is Down [ T292] pcieport 0000:00:1c.5: AER: Uncorrected (Non-Fatal) error received: 0000:09:00.0 [ T292] igb 0000:09:00.0: PCIe Bus Error: severity=Uncorrected (Non-Fatal), type=Transaction Layer, (Requester ID) [ T292] igb 0000:09:00.0: device [8086:1537] error status/mask=00004000/00000000 [ T292] igb 0000:09:00.0: [14] CmpltTO [ 200.105524,009][ T292] igb 0000:09:00.0: AER: TLP Header: 00000000 00000000 00000000 00000000 [ T292] pcieport 0000:00:1c.5: AER: broadcast error_detected message [ T292] igb 0000:09:00.0: Non-correctable non-fatal error reported. [ T292] pcieport 0000:00:1c.5: AER: broadcast mmio_enabled message [ T292] pcieport 0000:00:1c.5: AER: broadcast resume message [ T292] ------------[ cut here ]------------ [ T292] kernel BUG at net/core/dev.c:6539! [ T292] invalid opcode: 0000 [#1] PREEMPT SMP [ T292] RIP: 0010
CVE-2024-50040
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-50040
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "124e39a734cb90658b8f0dc110847bbfc6e33792",
"lessThan": "dca2ca65a8695d9593e2cf1b40848e073ad75413",
"versionType": "git"
},
{
"status": "affected",
"version": "c9f56f3c7bc908caa772112d3ae71cdd5d18c257",
"lessThan": "c92cbd283ddcf55fd85a9a9b0ba13298213f3dd7",
"versionType": "git"
},
{
"status": "affected",
"version": "994c2ceb70ea99264ccc6f09e6703ca267dad63c",
"lessThan": "d79af3af2f49c6aae9add3d492c04d60c1b85ce4",
"versionType": "git"
},
{
"status": "affected",
"version": "fa92c463eba75dcedbd8d689ffdcb83293aaa0c3",
"lessThan": "0a94079e3841d00ea5abb05e3233d019a86745f6",
"versionType": "git"
},
{
"status": "affected",
"version": "39695e87d86f0e7d897fba1d2559f825aa20caeb",
"lessThan": "6a39c8f5c8aae74c5ab2ba466791f59ffaab0178",
"versionType": "git"
},
{
"status": "affected",
"version": "004d25060c78fc31f66da0fa439c544dda1ac9d5",
"lessThan": "57c5053eaa5f9a8a99e34732e37a86615318e464",
"versionType": "git"
},
{
"status": "affected",
"version": "004d25060c78fc31f66da0fa439c544dda1ac9d5",
"lessThan": "500be93c5d53b7e2c5314292012185f0207bad0c",
"versionType": "git"
},
{
"status": "affected",
"version": "004d25060c78fc31f66da0fa439c544dda1ac9d5",
"lessThan": "330a699ecbfc9c26ec92c6310686da1230b4e7eb",
"versionType": "git"
},
{
"status": "affected",
"version": "c2312e1d12b1c3ee4100c173131b102e2aed4d04",
"versionType": "git"
},
{
"status": "affected",
"version": "41f63b72a01c0e0ac59ab83fd2d921fcce0f602d",
"versionType": "git"
},
{
"status": "affected",
"version": "4.19.291",
"lessThan": "4.19.323",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.4.251",
"lessThan": "5.4.285",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.188",
"lessThan": "5.10.227",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.150",
"lessThan": "5.15.168",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.42",
"lessThan": "6.1.113",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.14.322",
"lessThan": "4.15",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.4.7",
"lessThan": "6.5",
"versionType": "semver"
}
],
"programFiles": [
"drivers/net/ethernet/intel/igb/igb_main.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.5"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "4.19.323",
"versionType": "semver",
"lessThanOrEqual": "4.19.*"
},
{
"status": "unaffected",
"version": "5.4.285",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.227",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.168",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.113",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.57",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.11.4",
"versionType": "semver",
"lessThanOrEqual": "6.11.*"
},
{
"status": "unaffected",
"version": "6.12",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/ethernet/intel/igb/igb_main.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-50040
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26777 · Revision 1
- Added to Heist Feed
- Publisher date