Linux Kernel Ethtool Module Flash Error Handling Vulnerability

A vulnerability in the Linux kernel's ethtool module has been addressed. The issue arose because the function ethnl_ops_complete() was not called after a validation error, even though ethnl_ops_begin() had been previously invoked. This oversight could lead to improper handling of module flash operations.

Impact

The vulnerability could cause errors in the module flashing process, potentially leading to incorrect firmware updates or failures in flashing operations.

Reproduction

The vulnerability occurs in the ethtool module when the validation of a firmware flash operation fails. In this scenario, the completion function is skipped, creating a mismatch in the expected operation flow. This can be reproduced by initiating a firmware flash process for a transceiver module and deliberately causing the validation to fail, such as by providing incorrect parameters or using a module that does not support flashing.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.