Linux Kernel Atlantic Driver Hang Issue During PCI Resume

Vulnerability

A vulnerability in the Linux kernel's Atlantic network driver can cause a system hang when resuming from a sleep state. This issue arises because the driver improperly reinitializes the network interface controller (NIC) during the resume process, leading to a failure in the power management resume sequence. The problem has been traced back to the driver's handling of suspension and resume callbacks, particularly after the 'aq_nic_deinit()' function has been called. When this function is invoked during suspension, it should not be called again upon resume, as doing so creates a conflict that causes the system to hang.

Impact

The vulnerability can lead to a system hang, causing the device to become unresponsive after resuming from a low-power sleep state.

Reproduction

The vulnerability can be reproduced by putting the system into a low-power sleep state and then resuming it. During the resume process, the Atlantic driver incorrectly reinitializes the network interface, causing the system to hang. This issue can be observed in the kernel log, where the power management resume callback for the Atlantic device reports a failure, indicating that the driver did not resume properly.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.9
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.