Vulnerability · Published May 30, 2024 · Assigned by Linux
CVE-2024-36020i40e: fix vf may be used uninitialized in this function warning
High 7.8
In plain English
A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 82.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by commit 52424f974bc5, which causes servers hang in very hard to reproduce conditions with resets races. Using two sources for the information is the root cause. In this function before the fix bumping v didn't mean bumping vf pointer. But the code used this variables interchangeably, so stale vf could point to different/not intended vf. Remove redundant "v" variable and iterate via single VF pointer across whole function instead to guarantee VF pointer validity.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 7.3.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-doc | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-headers | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-tools | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | libperf | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | perf | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | python3-perf | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | rtla | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux:9 | rv | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| Debian:12 | linux | 6.1.85-1 | DEBIAN-CVE-2024-36020 |
| Debian:13 | linux | 6.8.9-1 | DEBIAN-CVE-2024-36020 |
| Debian:14 | linux | 6.8.9-1 | DEBIAN-CVE-2024-36020 |
| Rocky Linux:9 | kernel | 0:5.14.0-427.31.1.el9_4 | RLSA-2024:5363 |
| Ubuntu:22.04:LTS | linux | 5.15.0-116.126 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux | 6.8.0-38.38 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1065.71 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1011.12 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1011.12~22.04.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1068.77 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1010.10 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1068.77.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1064.72 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1010.11 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1062.68 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1006.9 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1048.55 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1058.61 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1008.8 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-intel | 6.8.0-1007.14 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1060.66 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1062.67 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-116.126 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-38.38.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1060.61 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1009.9 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1009.9~22.04.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1026.26 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1008.8 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1063.69 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1008.8 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1008.8~22.04.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1058.61 | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1007.7 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-38.38.1 | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2024-36020 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | UBUNTU-CVE-2024-36020 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 76ed715836c6994bac29d9638e9314e6e3b08651 – before cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23de88c2a1e28c5475065563d66c07ca879a9afbd07 – before 9dcf0fcb80f6aeb01469e3c957f8d4c97365450a9abae363af5ced6adbf04c14366289540281fb26 – before b8e82128b44fa40bf99a50b919488ef361e1683cc39de3ae5075ea5f78e097cb5720d4e52d5caed9 – before 951d2748a2a8242853abc3d0c153ce4bf8faad3152424f974bc53c26ba3f00300a00e9de9afcd972 – before 3e89846283f3cf7c7a8e28b342576fd7c561d2ba52424f974bc53c26ba3f00300a00e9de9afcd972 – before 0dcf573f997732702917af1563aa2493dc772fc052424f974bc53c26ba3f00300a00e9de9afcd972 – before 06df7618f591b2dc43c59967e294d7b9fc8675b652424f974bc53c26ba3f00300a00e9de9afcd972 – before f37c4eac99c258111d414d31b740437e1925b8e8 |
| Linux | Linux | 6.1 |
References
- https://git.kernel.org/stable/c/cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23d
- https://git.kernel.org/stable/c/9dcf0fcb80f6aeb01469e3c957f8d4c97365450a
- https://git.kernel.org/stable/c/b8e82128b44fa40bf99a50b919488ef361e1683c
- https://git.kernel.org/stable/c/951d2748a2a8242853abc3d0c153ce4bf8faad31
- https://git.kernel.org/stable/c/3e89846283f3cf7c7a8e28b342576fd7c561d2ba
- https://git.kernel.org/stable/c/0dcf573f997732702917af1563aa2493dc772fc0
- https://git.kernel.org/stable/c/06df7618f591b2dc43c59967e294d7b9fc8675b6
- https://git.kernel.org/stable/c/f37c4eac99c258111d414d31b740437e1925b8e8
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html