What’s Vulnerable › Vulnerabilities

CVE-2024-36021: net: hns3: fix kernel crash when devlink reload during pf initialization

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-30 · updated 2026-06-17
• Weakness: CWE-908

Description

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during pf initialization The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the devlink reload during initialization may lead to kernel crash. This patch fixes this by taking devl_lock during initialization.

Affected products

• Linux kernel: from 5.15 before 6.1.85; from 6.2 before 6.6.26; from 6.7 before 6.8.5; 6.9-rc1 — fixed in 6.1.85, 6.6.26, 6.8.5

How to fix

Upgrade to a fixed version: Linux kernel 6.1.85, 6.6.26, 6.8.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1b550dae55901c2cc9075d6a7155a71b4f516e86
• https://git.kernel.org/stable/c/50b69054f455dcdb34bd6b22764c7579b270eef3
• https://git.kernel.org/stable/c/7ca0f73e5e2da3c129935b97f3a0877cce8ebdf5
• https://git.kernel.org/stable/c/93305b77ffcb042f1538ecc383505e87d95aa05a
• https://git.kernel.org/stable/c/1b550dae55901c2cc9075d6a7155a71b4f516e86
• https://git.kernel.org/stable/c/50b69054f455dcdb34bd6b22764c7579b270eef3
• https://git.kernel.org/stable/c/7ca0f73e5e2da3c129935b97f3a0877cce8ebdf5
• https://git.kernel.org/stable/c/93305b77ffcb042f1538ecc383505e87d95aa05a

Get alerted when CVE-2024-36021 or the next vulnerability affects your stack