Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 7.0.0-rc4, < 7.0.0-rc4+
A vulnerability in the Linux kernel's TXGBE network driver can lead to a Real-Time Networking Layer (RTNL) assertion failure. This issue occurs when the driver disconnects from the physical layer (PHY) during module removal, particularly for copper network interface cards (NICs) with external PHYs. The problem arises because the disconnection process triggers an assertion warning, indicating a potential flaw in how the driver manages its connection to the PHY when the module is unloaded.
The vulnerability causes an RTNL assertion failure, which can disrupt the normal operation of the networking stack by improperly managing the synchronization of network resources during module removal.
To reproduce this issue, load the TXGBE driver module for a copper NIC with an external PHY. During the module removal process, the driver will attempt to disconnect from the PHY, which will trigger an RTNL assertion warning. This can be observed in the system logs, where the assertion failure will be recorded, indicating that the disconnection process did not complete successfully.
The vulnerability has been addressed by adding proper locking mechanisms around the PHY disconnection process in the TXGBE driver. Users should update to the latest version of the Linux kernel where this fix has been applied.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.