CVE-2024-46784 net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
A null pointer dereference in the Linux kernel's mana driver causes a kernel panic during queue cleanup, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-46784?
CVE-2024-46784 is a medium-severity vulnerability in Linux kernel, published on 18 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
Currently napi_disable() gets called during rxq and txq cleanup, even before napi is enabled and hrtimer is initialized. It causes kernel panic.
? page_fault_oops+0x136/0x2b0 ? page_counter_cancel+0x2e/0x80 ? do_user_addr_fault+0x2f2/0x640 ? refill_obj_stock+0xc4/0x110 ? exc_page_fault+0x71/0x160 ? asm_exc_page_fault+0x27/0x30 ? __mmdrop+0x10/0x180 ? __mmdrop+0xec/0x180 ? hrtimer_active+0xd/0x50 hrtimer_try_to_cancel+0x2c/0xf0 hrtimer_cancel+0x15/0x30 napi_disable+0x65/0x90 mana_destroy_rxq+0x4c/0x2f0 mana_create_rxq.isra.0+0x56c/0x6d0 ? mana_uncfg_vport+0x50/0x50 mana_alloc_queues+0x21b/0x320 ? skb_dequeue+0x5f/0x80
Weakness: CWE-908
Which versions are affected by CVE-2024-46784?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-46784?
Apply the vendor's patch.
Is CVE-2024-46784 being exploited?
There is no known exploitation of CVE-2024-46784 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-49675, BELL-CVE-2024-46784, DEBIAN-CVE-2024-46784, GHSA-3ffp-ffxg-jv46, UBUNTU-CVE-2024-46784.