Linux Kernel Octeon EP Host Hang Vulnerability During Device Reboot

Vulnerability

A vulnerability in the Linux kernel's Octeon EP driver can cause the host to hang during device reboot. This issue arises when the host misses heartbeat messages from the device, prompting the driver to call the device-specific ndo_stop function to free resources. If the driver is unloaded at this time, it can lead to a conflict by attempting to free resources that have already been released, causing the host to hang. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can lead to a host hang issue, causing disruptions in system operations and potentially requiring a manual restart to resolve.

Remediation

To address this vulnerability, the dev_close function should be used instead of the device-specific ndo_stop function. The dev_close function stops the network interface and performs additional cleanup, preventing the double-free issue that causes the host hang. During the driver unload process, if the device is already down, ndo_stop does not need to be called.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.