CVE-2024-35907

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mlxbf_gige: call request_irq() after NAPI initialized

The mlxbf_gige driver encounters a NULL pointer exception in

mlxbf_gige_open() when kdump is enabled. The sequence to reproduce

the exception is as follows:

a) enable kdump

b) trigger kdump via "echo c > /proc/sysrq-trigger"

c) kdump kernel executes

d) kdump kernel loads mlxbf_gige module

e) the mlxbf_gige module runs its open() as the

the "oob_net0" interface is brought up

f) mlxbf_gige module will experience an exception

during its open(), something like:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000

Mem abort info:

ESR = 0x0000000086000004

EC = 0x21: IABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x04: level 0 translation fault

user pgtable: 4k pages, 48-bit VAs, pgdp=00000000e29a4000

[0000000000000000] pgd=0000000000000000, p4d=000000

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References