In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the information is the root cause. In this function before the fix bumping v didn't mean bumping vf pointer. But the code used this variables interchangeably, so stale vf could point to different/not intended vf. Remove redundant "v" variable and iterate via single VF pointer across whole function instead to guarantee VF pointer validity.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: i40e: se puede usar vf sin inicializar en esta función advertencia Para corregir la regresión introducida por el commit 52424f974bc5, que hace que los servidores se cuelguen con mucha dificultad para reproducir condiciones con restablecimientos de ejecución. El uso de dos fuentes para la información es la causa fundamental. En esta función, antes de la corrección, tocar v no significaba tocar el puntero vf. Pero el código usaba estas variables indistintamente, por lo que un vf obsoleto podría apuntar a un vf diferente o no intencionado. Elimine la variable "v" redundante e itere mediante un único puntero VF en toda la función para garantizar la validez del puntero VF.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-908
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd384a83800> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd368d2da00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd342603d80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3694cb300> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd384a80a80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3104eb780> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36a73d4c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd384de9ac0> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd3694f25c0> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd369adb500> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd3694cbb80> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd3426017c0> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd3426000c0> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd3694f3700> | Operating System |
| linux | linux_kernel | 6.1 | <built-in method update of dict object at 0x7fd36a71aa80> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd3415e5a40> | Operating System |
| linux | linux_kernel | 6.9 | <built-in method update of dict object at 0x7fd386743bc0> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd341242040> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |