Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's Intel Ice Ethernet driver, specifically in the handling of Precision Time Protocol (PTP) resources during driver removal. This issue arises when an error occurs either during the driver probe and PTP feature initialization or during a PTP restart, such as errors in reset handling or NVM updates. In these error scenarios, the necessary cleanup functions were not called, leading to resource management issues. The absence of proper cleanup can cause warning messages related to the ice_adapter object being freed, indicating that the port list is not empty when it should be.
Failing to clean up PTP resources properly can lead to warnings and potential instability when the driver is unloaded, as indicated by a call trace showing an invalid operation exception.
The vulnerability can be reproduced by loading the Intel Ice Ethernet driver and then triggering an error during the PTP initialization or reset process. This can be done by simulating a failure in the PTP reset handling or NVM update, which will cause the driver to skip the necessary cleanup steps before unloading.
Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that fixes this issue is available in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.