CVE-2024-36004

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

i40e: Do not use WQ_MEM_RECLAIM flag for workqueue

Issue reported by customer during SRIOV testing, call trace:

When both i40e and the i40iw driver are loaded, a warning

in check_flush_dependency is being triggered. This seems

to be because of the i40e driver workqueue is allocated with

the WQ_MEM_RECLAIM flag, and the i40iw one is not.

Similar error was encountered on ice too and it was fixed by

removing the flag. Do the same for i40e too.

[Feb 9 09:08] ------------[ cut here ]------------

[ +0.000004] workqueue: WQ_MEM_RECLAIM i40e:i40e_service_task [i40e] is

flushing !WQ_MEM_RECLAIM infiniband:0x0

[ +0.000060] WARNING: CPU: 0 PID: 937 at kernel/workqueue.c:2966

check_flush_dependency+0x10b/0x120

[ +0.000007] Modules linked in: snd_seq_dummy snd_hrtimer snd_seq

snd_timer snd_seq_device snd soundcore nls_utf8 cifs cifs_arc4

nls_ucs2_utils rdma_cm iw_cm ib_cm cifs_md4 dns_resolver netfs qrtr

rfkill sunrpc vfat f

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References