Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e5811b8c09df9bc80eabc95339fceded23f16289 to < 1449177b87f768353909e930a99b902675119b2baffectede5811b8c09df9bc80eabc95339fceded23f16289 to < 964b1c3eb71afe58bb61c8b984164447e000ae8aaffectede5811b8c09df9bc80eabc95339fceded23f16289 to < 59c5a3e69c7630a811565937e64be70b08436761affectede5811b8c09df9bc80eabc95339fceded23f16289 to < 1a418ad0e5e525d1d117dd1601681f75455af320affectede5811b8c09df9bc80eabc95339fceded23f16289 to < 08e57d014ea19f303d5d57a849beb846f37788b7affectede5811b8c09df9bc80eabc95339fceded23f16289 to < 3884976f87448e269908ae61bd5d62d54ce9c0c7affectede5811b8c09df9bc80eabc95339fceded23f16289 to < 580844a9683afe7974856dd5b7886447435b3474affectede5811b8c09df9bc80eabc95339fceded23f16289 to < d930276f2cddd0b7294cac7a8fe7b877f6d9e08daffected
Linux Linux
Default version status: affected
4.17affected0 to < 4.17unaffected5.10.260 to ≤ 5.10.*unaffected5.15.210 to ≤ 5.15.*unaffected6.1.176 to ≤ 6.1.*unaffected6.6.143 to ≤ 6.6.*unaffected6.12.94 to ≤ 6.12.*unaffected6.18.36 to ≤ 6.18.*unaffected7.0.13 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1449177b87f768353909e930a99b902675119b2b ↗
- https://git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a ↗
- https://git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761 ↗
- https://git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320 ↗
- https://git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7 ↗
- https://git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7 ↗
- https://git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474 ↗
- https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗