CVE-2024-39507

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-39507

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may uninit, then cause kernel crash. To fix the problem, when link status change, need to check whether the roce registered, and when uninit, need to wait link update finish.

References
Link Resource
https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4 Patch
https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 Patch
https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa Patch
https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 Patch
https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd Patch
https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4 Patch
https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 Patch
https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa Patch
https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 Patch
https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
History

03 Nov 2025, 22:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

06 Mar 2025, 12:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-908
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4 - () https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4 - Patch
References () https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 - () https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 - Patch
References () https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa - () https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa - Patch
References () https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 - () https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 - Patch
References () https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd - () https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd - Patch
First Time Linux
Linux linux Kernel

21 Nov 2024, 09:27

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4 - () https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4 -
References () https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 - () https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 -
References () https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa - () https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa -
References () https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 - () https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 -
References () https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd - () https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: net: hns3: soluciona el problema de falla del kernel en un escenario concurrente Cuando el estado del enlace cambia, el controlador nic debe notificar al controlador roce para manejar este evento, pero en este momento, el controlador roce puede desiniciar y luego causar un fallo del kernel. Para solucionar el problema, cuando cambia el estado del enlace, es necesario verificar si el roce se registró y, cuando se desinstala, es necesario esperar a que finalice la actualización del enlace.

12 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-12 13:15

Updated : 2025-11-03 22:17

NVD link : CVE-2024-39507

Mitre link : CVE-2024-39507

CVE.ORG link : CVE-2024-39507

JSON object : View

Products Affected

linux

CWE
CWE-908

Use of Uninitialized Resource