CVE-2024-36020

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/05/2024
Last modified:
05/11/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> i40e: fix vf may be used uninitialized in this function warning<br /> <br /> To fix the regression introduced by commit 52424f974bc5, which causes<br /> servers hang in very hard to reproduce conditions with resets races.<br /> Using two sources for the information is the root cause.<br /> In this function before the fix bumping v didn&amp;#39;t mean bumping vf<br /> pointer. But the code used this variables interchangeably, so stale vf<br /> could point to different/not intended vf.<br /> <br /> Remove redundant "v" variable and iterate via single VF pointer across<br /> whole function instead to guarantee VF pointer validity.

Impact