CVE-2024-52332

A flaw was found in the Intel Gigabit Ethernet (igb) network driver within the Linux kernel. When driver registration fails during initialization, the driver fails to properly unregister its Direct Cache Access (DCA) notification handler. A local attacker could exploit this condition upon driver initialization failure, leading to an invalid memory access and causing a system crash that results in a Denial of Service (DoS).

Bug could happen during error path and during device registration. The security impact is limited.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module igb from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.