Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-36020

i40e: fix vf may be used uninitialized in this function warning

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the information is the root cause. In this function before the fix bumping v didn't mean bumping vf pointer. But the code used this variables interchangeably, so stale vf could point to different/not intended vf. Remove redundant "v" variable and iterate via single VF pointer across whole function instead to guarantee VF pointer validity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 76ed715836c6994bac29d9638e9314e6e3b08651 to < cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23daffected
  • e88c2a1e28c5475065563d66c07ca879a9afbd07 to < 9dcf0fcb80f6aeb01469e3c957f8d4c97365450aaffected
  • 9abae363af5ced6adbf04c14366289540281fb26 to < b8e82128b44fa40bf99a50b919488ef361e1683caffected
  • c39de3ae5075ea5f78e097cb5720d4e52d5caed9 to < 951d2748a2a8242853abc3d0c153ce4bf8faad31affected
  • 52424f974bc53c26ba3f00300a00e9de9afcd972 to < 3e89846283f3cf7c7a8e28b342576fd7c561d2baaffected
  • 52424f974bc53c26ba3f00300a00e9de9afcd972 to < 0dcf573f997732702917af1563aa2493dc772fc0affected
  • 52424f974bc53c26ba3f00300a00e9de9afcd972 to < 06df7618f591b2dc43c59967e294d7b9fc8675b6affected
  • 52424f974bc53c26ba3f00300a00e9de9afcd972 to < f37c4eac99c258111d414d31b740437e1925b8e8affected
  • 02f949747e6fb767b29f7931d4bbf40911684e7aaffected
  • 4.19.264 to < 4.19.312affected
  • 5.4.223 to < 5.4.274affected
  • 5.10.153 to < 5.10.215affected
  • 5.15.77 to < 5.15.154affected
  • 6.0.7 to < 6.1affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 4.19.312 to ≤ 4.19.*unaffected
  • 5.4.274 to ≤ 5.4.*unaffected
  • 5.10.215 to ≤ 5.10.*unaffected
  • 5.15.154 to ≤ 5.15.*unaffected
  • 6.1.85 to ≤ 6.1.*unaffected
  • 6.6.26 to ≤ 6.6.*unaffected
  • 6.8.5 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References