CVE-2024-46784

net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup

State
Published
Severity
Not scored
Published
Sep 18, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup

Currently napi_disable() gets called during rxq and txq cleanup, even before napi is enabled and hrtimer is initialized. It causes kernel panic.

? page_fault_oops+0x136/0x2b0 ? page_counter_cancel+0x2e/0x80 ? do_user_addr_fault+0x2f2/0x640 ? refill_obj_stock+0xc4/0x110 ? exc_page_fault+0x71/0x160 ? asm_exc_page_fault+0x27/0x30 ? __mmdrop+0x10/0x180 ? __mmdrop+0xec/0x180 ? hrtimer_active+0xd/0x50 hrtimer_try_to_cancel+0x2c/0xf0 hrtimer_cancel+0x15/0x30 napi_disable+0x65/0x90 mana_destroy_rxq+0x4c/0x2f0 mana_create_rxq.isra.0+0x56c/0x6d0 ? mana_uncfg_vport+0x50/0x50 mana_alloc_queues+0x21b/0x320 ? skb_dequeue+0x5f/0x80

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e1b5683ff62e7b328317aec08869495992053e9d to before 386617efacab10bf5bb40bde403467c57cc00470Affected
  • e1b5683ff62e7b328317aec08869495992053e9d to before 9178eb8ebcd887ab75e54ac40d538e54bb9c7788Affected
  • e1b5683ff62e7b328317aec08869495992053e9d to before 9e0bff4900b5d412a9bafe4baeaa6facd34f671cAffected
  • e1b5683ff62e7b328317aec08869495992053e9d to before 4982a47154f0b50de81ee0a0b169a3fc74120a65Affected
  • e1b5683ff62e7b328317aec08869495992053e9d to before b6ecc662037694488bfff7c9fd21c405df8411f2Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.110 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.