CVE-2024-44995

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix a deadlock problem when config TC during resetting

When config TC during the reset process, may cause a deadlock, the flow is as below: pf reset start │ ▼ ...... setup tc │ │ ▼ ▼ DOWN: napi_disable() napi_disable()(skip) │ │ │ ▼ ▼ ...... ...... │ │ ▼ │ napi_enable() │ ▼ UINIT: netif_napi_del() │ ▼ ...... │ ▼ INIT: netif_napi_add() │ ▼ ...... global reset start │ │ ▼ ▼ UP: napi_enable()(skip) ...... │ │ ▼ ▼ ...... napi_disable()

In reset process, the driver will DOWN the port and then UINIT, in this case, the setup tc process will UP the port before UINIT, so cause the problem. Adds a DOWN process in UINIT to fix it.

A low impact deadlock vulnerability was found in the Linux kernel's Hisilicon hns3 network driver. When traffic control (TC) parameters are configured on an hns3 device while a reset (PF or global reset) is in progress, the setup_tc code path can re-enable the port (UP) after the reset flow has already taken it down (DOWN/UINIT via napi_disable/netif_napi_del), causing a deadlock that leaves the network device unavailable. Triggering this condition requires privileged local access to reconfigure the network device during a reset, and the impact is limited to availability. This matches Red Hat's LOW severity rating and CVSS 3.1 score of 4.4 (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H), which is lower than the upstream CVEORG score of 7.8 because this issue does not compromise confidentiality or integrity. Of Red Hat's product portfolio, only the Fedora community kernel is affected, and the fix has been delivered through Fedora kernel updates; Red Hat Enterprise Linux 6 through 9 (kernel and kernel-rt) and Hosted OpenShift clusters are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.