Bug 2301481 (CVE-2024-42116) - CVE-2024-42116 kernel: igc: fix a log entry using uninitialized netdev
Summary: CVE-2024-42116 kernel: igc: fix a log entry using uninitialized netdev
Keywords:
Status: NEW
Alias: CVE-2024-42116
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2301781
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-30 08:32 UTC by OSIDB Bzimport
Modified: 2024-09-23 15:30 UTC (History)
5 users (show)

Fixed In Version: kernel 5.15.163, kernel 6.1.98, kernel 6.6.39, kernel 6.9.9, kernel 6.10
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-07-30 08:32:02 UTC
In the Linux kernel, the following vulnerability has been resolved:

igc: fix a log entry using uninitialized netdev

During successful probe, igc logs this:

[    5.133667] igc 0000:01:00.0 (unnamed net_device) (uninitialized): PHC added
                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The reason is that igc_ptp_init() is called very early, even before
register_netdev() has been called. So the netdev_info() call works
on a partially uninitialized netdev.

Fix this by calling igc_ptp_init() after register_netdev(), right
after the media autosense check, just as in igb.  Add a comment,
just as in igb.

Now the log message is fine:

[    5.200987] igc 0000:01:00.0 eth0: PHC added

Comment 1 Mauro Matteo Cascella 2024-07-30 19:03:17 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024073023-CVE-2024-42116-b420@gregkh/T

Comment 2 Mauro Matteo Cascella 2024-07-30 19:03:39 UTC
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2301781]

Comment 10 Michal Schmidt 2024-08-13 12:16:18 UTC
The log message just a cosmetic issue with no security impact and the patch is already known to be broken.


Note You need to log in before you can comment on or make changes to this bug.