Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +3 more
A deadlock vulnerability has been identified in the Linux kernel's HNS3 network driver. This issue arises when the external loopback (externel_lb) function and the reset process are executed simultaneously. The deadlock occurs because the driver first disables the NAPI (Network API) processing, then initiates a reset, which disrupts the loopback process and prevents re-enabling NAPI. When the loopback function is called again, it attempts to disable NAPI a second time, leading to a deadlock situation. The vulnerability affects several versions of the Linux kernel.
The vulnerability can cause a deadlock in the system, where a task is blocked for an extended period, potentially leading to a hung task situation.
To reproduce this vulnerability, execute the external loopback function in the HNS3 driver while simultaneously initiating a reset process. Monitor the system for signs of a deadlock, such as a task being blocked for over 120 seconds.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.