In the Linux kernel, the following vulnerability has been resolved:
ice: protect XDP configuration with a mutex
The main threat to data consistency in ice_xdp() is a possible asynchronous PF reset. It can be triggered by a user or by TX timeout handler.
XDP setup and PF reset code access the same resources in the following sections: * icevsiclose() in iceprepareforreset() - already rtnl-locked * icevsirebuild() for the PF VSI - not protected * icevsi_open() - already rtnl-locked
With an unfortunate timing, such accesses can result in a crash such as the one below:
[ +1.999878] ice 0000:b1:00.0: Registered XDP mem model MEMTYPEXSKBUFFPOOL on Rx ring 14 [ +2.002992] ice 0000:b1:00.0: Registered XDP mem model MEMTYPEXSKBUFFPOOL on Rx ring 18 [Mar15 18:17] ice 0000:b1:00.0 ens801f0np0: NETDEV WATCHDOG: CPU: 38: transmit queue 14 timed out 80692736 ms [ +0.000093] ice 0000:b1:00.0 ens801f0np0: txtimeout: VSInum: 6, Q 14, NTC: 0x0, HWHEAD: 0x0, NTU: 0x0, INT: 0x4000001 [ +0.000012] ice 0000:b1:00.0 ens801f0np0: txtimeout recovery level 1, txqueue 14 [ +0.394718] ice 0000:b1:00.0: PTP reset successful [ +0.006184] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ +0.000045] #PF: supervisor read access in kernel mode [ +0.000023] #PF: errorcode(0x0000) - not-present page [ +0.000023] PGD 0 P4D 0 [ +0.000018] Oops: 0000 [#1] PREEMPT SMP NOPTI [ +0.000023] CPU: 38 PID: 7540 Comm: kworker/38:1 Not tainted 6.8.0-rc7 #1 [ +0.000031] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0014.082620210524 08/26/2021 [ +0.000036] Workqueue: ice iceservicetask [ice] [ +0.000183] RIP: 0010:icecleantxring+0xa/0xd0 [ice] [...] [ +0.000013] Call Trace: [ +0.000016] <TASK> [ +0.000014] ? _die+0x1f/0x70 [ +0.000029] ? pagefaultoops+0x171/0x4f0 [ +0.000029] ? schedule+0x3b/0xd0 [ +0.000027] ? excpagefault+0x7b/0x180 [ +0.000022] ? asmexcpagefault+0x22/0x30 [ +0.000031] ? icecleantxring+0xa/0xd0 [ice] [ +0.000194] icefreetxring+0xe/0x60 [ice] [ +0.000186] icedestroyxdprings+0x157/0x310 [ice] [ +0.000151] icevsidecfg+0x53/0xe0 [ice] [ +0.000180] icevsirebuild+0x239/0x540 [ice] [ +0.000186] icevsirebuildbytype+0x76/0x180 [ice] [ +0.000145] icerebuild+0x18c/0x840 [ice] [ +0.000145] ? delaytsc+0x4a/0xc0 [ +0.000022] ? delaytsc+0x92/0xc0 [ +0.000020] icedoreset+0x140/0x180 [ice] [ +0.000886] iceservicetask+0x404/0x1030 [ice] [ +0.000824] processonework+0x171/0x340 [ +0.000685] workerthread+0x277/0x3a0 [ +0.000675] ? preemptcountadd+0x6a/0xa0 [ +0.000677] ? _rawspinlockirqsave+0x23/0x50 [ +0.000679] ? _pfxworkerthread+0x10/0x10 [ +0.000653] kthread+0xf0/0x120 [ +0.000635] ? _pfxkthread+0x10/0x10 [ +0.000616] retfromfork+0x2d/0x50 [ +0.000612] ? _pfxkthread+0x10/0x10 [ +0.000604] retfromforkasm+0x1b/0x30 [ +0.000604] </TASK>
The previous way of handling this through returning -EBUSY is not viable, particularly when destroying AF_XDP socket, because the kernel proceeds with removal anyway.
There is plenty of code between those calls and there is no need to create a large critical section that covers all of them, same as there is no need to protect icevsirebuild() with rtnl_lock().
Add xdpstatelock mutex to protect icevsirebuild() and ice_xdp().
Leaving unprotected sections in between would result in two states that have to be considered: 1. when the VSI is closed, but not yet rebuild 2. when VSI is already rebuild, but not yet open
The latter case is actually already handled through !netifrunning() case, we just need to adjust flag checking a little. The former one is not as trivial, because between icevsiclose() and icevsi_rebuild(), a lot of hardware interaction happens, this can make adding/deleting rings exit with an error. Luckily, VSI rebuild is pending and can apply new configuration for us in a managed fashion.
Therefore, add an additional VSI state flag ICEVSIREBUILDPENDING to indicate that icex ---truncated---
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 486.0,
"function_hash": "174448932624740764303993469820374746371"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_xdp"
},
"id": "CVE-2024-46765-01543077"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 620.0,
"function_hash": "35408285145705775416397736383866825886"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_alloc"
},
"id": "CVE-2024-46765-02bad578"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"314051107500591444891708789164801313654",
"263764782807146779293938027086133455546",
"170274837771998111523328834576738092236",
"334317908058902805390542562801081287885",
"208950426939300776390155485596286998594",
"64959362203926432279535613353279459396",
"306419280092630864005983458928481884666",
"72298617137096674574806585056627003491",
"210877373592576587465401498385632640708",
"87184630861536013256674437574576519052",
"115462591856587152996525899188496571465",
"310888316082580822794029342701419272018",
"224875767464914434406460259778834106624",
"313560476240900861145996328980449621892",
"315111933058415685367792322568293067138",
"285283130847960838039130699660659075622",
"265239814028100617389039438681314790244",
"301026696724366024719156330542874688320",
"306042614492770992571525833644974973403",
"165028808214174546094561633214320403852",
"258258857385570220041709126522372618225",
"133389866813099876033527907276287240710",
"224738407552077772070886337023383435507",
"142039957136038502414054884359184768511",
"240906461012335145283240422757331245559",
"41317741795904165778626779429676184144",
"78651124080653795357580634966934477626",
"167766386201680681481715145391660968462",
"71362070874990590343902315398431608026",
"249832858496081414773309467848340193622",
"169347172919004523944915284254144143318",
"287632485301475896273723340675191725449",
"183248618288729670066387889714640975598",
"212720603297920617558919257702530380889",
"282250191902627790239464554686900501826",
"140147713975695792122670020776225934741"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c"
},
"id": "CVE-2024-46765-07268e4c"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 877.0,
"function_hash": "208210985844995262280803831719367945633"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_rebuild"
},
"id": "CVE-2024-46765-13a97063"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"119069293736314910580893059254549939148",
"16003220688467245303338051156423690714",
"142676406580138002609613060120052365105",
"199836760531792532805979428297478822675",
"160972808530611211392419403368776523615",
"78370294829198743548357969663216626872",
"75167726985844195167090686842801530423",
"57563893592255511019688104081850526280",
"37610510238246186407849148792257883576",
"204263637685001799495165336685081397882",
"211814833331354015750604737416740299932",
"320331208795355282789619454051257001814",
"287680171320736252372112323880759033288",
"114138167443698245555281853544128717229",
"111944000044326441534677434870450676154",
"82347351183607726733175997060846773515",
"213430263652695933512015011361590241343",
"211998782535980927706975404923556969379",
"230991418595689721358163966285145072859",
"35665735296225380251325329983143908400",
"191997668332914147390386254127704866491",
"230854622574928264560172461107740349273",
"58151902817144441668011675826130512528",
"195343825585655555104917831924687808250"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c"
},
"id": "CVE-2024-46765-17255f73"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"314051107500591444891708789164801313654",
"263764782807146779293938027086133455546",
"170274837771998111523328834576738092236",
"334317908058902805390542562801081287885",
"208950426939300776390155485596286998594",
"64959362203926432279535613353279459396",
"306419280092630864005983458928481884666",
"72298617137096674574806585056627003491",
"210877373592576587465401498385632640708",
"87184630861536013256674437574576519052",
"115462591856587152996525899188496571465",
"310888316082580822794029342701419272018",
"224875767464914434406460259778834106624",
"313560476240900861145996328980449621892",
"315111933058415685367792322568293067138",
"285283130847960838039130699660659075622",
"265239814028100617389039438681314790244",
"301026696724366024719156330542874688320",
"306042614492770992571525833644974973403",
"165028808214174546094561633214320403852",
"258258857385570220041709126522372618225",
"133389866813099876033527907276287240710",
"224738407552077772070886337023383435507",
"142039957136038502414054884359184768511",
"240906461012335145283240422757331245559",
"41317741795904165778626779429676184144",
"78651124080653795357580634966934477626",
"167766386201680681481715145391660968462",
"71362070874990590343902315398431608026",
"249832858496081414773309467848340193622",
"169347172919004523944915284254144143318",
"287632485301475896273723340675191725449",
"183248618288729670066387889714640975598",
"212720603297920617558919257702530380889",
"282250191902627790239464554686900501826",
"140147713975695792122670020776225934741"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c"
},
"id": "CVE-2024-46765-1969dec6"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 486.0,
"function_hash": "174448932624740764303993469820374746371"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_xdp"
},
"id": "CVE-2024-46765-2374623b"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 543.0,
"function_hash": "221477002707820092395055769675767172992"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_free"
},
"id": "CVE-2024-46765-2a29803b"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1537.0,
"function_hash": "79469203576617801812229263164436106715"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_prepare_for_reset"
},
"id": "CVE-2024-46765-2c23a56c"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1514.0,
"function_hash": "103190895582595383785825849021603433807"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_xdp_setup_prog"
},
"id": "CVE-2024-46765-2dbf4a26"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1109.0,
"function_hash": "306927511800010967715856623696893133528"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_xsk.c",
"function": "ice_xsk_pool_setup"
},
"id": "CVE-2024-46765-2f0f690d"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1553.0,
"function_hash": "142076640880920820758025731854827563410"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_prepare_for_reset"
},
"id": "CVE-2024-46765-36190380"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1514.0,
"function_hash": "103190895582595383785825849021603433807"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_xdp_setup_prog"
},
"id": "CVE-2024-46765-39ee64e1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 959.0,
"function_hash": "236653230072713721113764879045244020102"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_rebuild"
},
"id": "CVE-2024-46765-463685e6"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1514.0,
"function_hash": "103190895582595383785825849021603433807"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_xdp_setup_prog"
},
"id": "CVE-2024-46765-4ab8b9e7"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"275035576215538011359488190889453335607",
"220911136648111035208947735193108731006",
"82511460626367486113971024851059009052",
"101375970772928799066406287460392268707"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_xsk.c"
},
"id": "CVE-2024-46765-5431fd89"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"119069293736314910580893059254549939148",
"16003220688467245303338051156423690714",
"220839484955803495651965622903040780526",
"199836760531792532805979428297478822675",
"160972808530611211392419403368776523615",
"78370294829198743548357969663216626872",
"75167726985844195167090686842801530423",
"57563893592255511019688104081850526280",
"37610510238246186407849148792257883576",
"204263637685001799495165336685081397882",
"211814833331354015750604737416740299932",
"320331208795355282789619454051257001814",
"287680171320736252372112323880759033288",
"114138167443698245555281853544128717229",
"111944000044326441534677434870450676154",
"82347351183607726733175997060846773515",
"213430263652695933512015011361590241343",
"211998782535980927706975404923556969379",
"230991418595689721358163966285145072859",
"35665735296225380251325329983143908400",
"191997668332914147390386254127704866491",
"230854622574928264560172461107740349273",
"58151902817144441668011675826130512528",
"195343825585655555104917831924687808250"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c"
},
"id": "CVE-2024-46765-5da68c54"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"314051107500591444891708789164801313654",
"263764782807146779293938027086133455546",
"170274837771998111523328834576738092236",
"334317908058902805390542562801081287885",
"208950426939300776390155485596286998594",
"64959362203926432279535613353279459396",
"306419280092630864005983458928481884666",
"72298617137096674574806585056627003491",
"210877373592576587465401498385632640708",
"87184630861536013256674437574576519052",
"115462591856587152996525899188496571465",
"265394767440809577620948475370373430382",
"298733076555124988731469113107770006798",
"262303419222219787004943584260388312549",
"282855884882912374738920661080197694645",
"285283130847960838039130699660659075622",
"265239814028100617389039438681314790244",
"301026696724366024719156330542874688320",
"306042614492770992571525833644974973403",
"165028808214174546094561633214320403852",
"258258857385570220041709126522372618225",
"133389866813099876033527907276287240710",
"224738407552077772070886337023383435507",
"142039957136038502414054884359184768511",
"240906461012335145283240422757331245559",
"41317741795904165778626779429676184144",
"78651124080653795357580634966934477626",
"167766386201680681481715145391660968462",
"71362070874990590343902315398431608026",
"249832858496081414773309467848340193622",
"169347172919004523944915284254144143318",
"287632485301475896273723340675191725449",
"183248618288729670066387889714640975598",
"212720603297920617558919257702530380889",
"282250191902627790239464554686900501826",
"140147713975695792122670020776225934741"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c"
},
"id": "CVE-2024-46765-60a868fd"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"275035576215538011359488190889453335607",
"220911136648111035208947735193108731006",
"82511460626367486113971024851059009052",
"101375970772928799066406287460392268707"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_xsk.c"
},
"id": "CVE-2024-46765-64cdba0e"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 543.0,
"function_hash": "221477002707820092395055769675767172992"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_free"
},
"id": "CVE-2024-46765-6af6460a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 486.0,
"function_hash": "174448932624740764303993469820374746371"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_xdp"
},
"id": "CVE-2024-46765-6b9bac40"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"278004621436285269345278045526702945582",
"199015595449814331934191577041452778536",
"137495617352646579840597284679063393114",
"206308721465923068247138902010348399541",
"332312711350214344234890655631022954685",
"242367106677773684328180541042596591630",
"145480971377524605412775683489299316289",
"71830484455163538542780522944604922614"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice.h"
},
"id": "CVE-2024-46765-6e52808e"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"119069293736314910580893059254549939148",
"16003220688467245303338051156423690714",
"220839484955803495651965622903040780526",
"199836760531792532805979428297478822675",
"160972808530611211392419403368776523615",
"78370294829198743548357969663216626872",
"75167726985844195167090686842801530423",
"57563893592255511019688104081850526280",
"37610510238246186407849148792257883576",
"204263637685001799495165336685081397882",
"211814833331354015750604737416740299932",
"320331208795355282789619454051257001814",
"287680171320736252372112323880759033288",
"114138167443698245555281853544128717229",
"111944000044326441534677434870450676154",
"82347351183607726733175997060846773515",
"213430263652695933512015011361590241343",
"211998782535980927706975404923556969379",
"230991418595689721358163966285145072859",
"35665735296225380251325329983143908400",
"191997668332914147390386254127704866491",
"230854622574928264560172461107740349273",
"58151902817144441668011675826130512528",
"195343825585655555104917831924687808250"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c"
},
"id": "CVE-2024-46765-7f728d23"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 877.0,
"function_hash": "208210985844995262280803831719367945633"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2504b8405768a57a71e660dbfd5abd59f679a03f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_rebuild"
},
"id": "CVE-2024-46765-8ccfac74"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1109.0,
"function_hash": "306927511800010967715856623696893133528"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_xsk.c",
"function": "ice_xsk_pool_setup"
},
"id": "CVE-2024-46765-98e2b26a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1545.0,
"function_hash": "80523693034294376735153955780140934954"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_main.c",
"function": "ice_prepare_for_reset"
},
"id": "CVE-2024-46765-a39a3134"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"278004621436285269345278045526702945582",
"199015595449814331934191577041452778536",
"137495617352646579840597284679063393114",
"206308721465923068247138902010348399541",
"332312711350214344234890655631022954685",
"242367106677773684328180541042596591630",
"145480971377524605412775683489299316289",
"71830484455163538542780522944604922614"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice.h"
},
"id": "CVE-2024-46765-abe8cc85"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 620.0,
"function_hash": "35408285145705775416397736383866825886"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_alloc"
},
"id": "CVE-2024-46765-af5c225b"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 620.0,
"function_hash": "35408285145705775416397736383866825886"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_alloc"
},
"id": "CVE-2024-46765-af886000"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 543.0,
"function_hash": "221477002707820092395055769675767172992"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_lib.c",
"function": "ice_vsi_free"
},
"id": "CVE-2024-46765-bd6d0076"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1109.0,
"function_hash": "306927511800010967715856623696893133528"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_xsk.c",
"function": "ice_xsk_pool_setup"
},
"id": "CVE-2024-46765-d5342fb5"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"275035576215538011359488190889453335607",
"220911136648111035208947735193108731006",
"82511460626367486113971024851059009052",
"101375970772928799066406287460392268707"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@391f7dae3d836891fc6cfbde38add2d0e10c6b7f",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice_xsk.c"
},
"id": "CVE-2024-46765-d5aa085f"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"278004621436285269345278045526702945582",
"199015595449814331934191577041452778536",
"137495617352646579840597284679063393114",
"206308721465923068247138902010348399541",
"332312711350214344234890655631022954685",
"242367106677773684328180541042596591630",
"145480971377524605412775683489299316289",
"71830484455163538542780522944604922614"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f057db2fb29bc209c103050647562e60554d3d3",
"target": {
"file": "drivers/net/ethernet/intel/ice/ice.h"
},
"id": "CVE-2024-46765-fabd47b9"
}
]