NVD Vulnerability Detail

CVE-2024-44995

Summary	In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC during resetting When config TC during the reset process, may cause a deadlock, the flow is as below: pf reset start ¦ ? ...... setup tc ¦ ¦ ? ? DOWN: napi_disable() napi_disable()(skip) ¦ ¦ ¦ ? ? ...... ...... ¦ ¦ ? ¦ napi_enable() ¦ ? UINIT: netif_napi_del() ¦ ? ...... ¦ ? INIT: netif_napi_add() ¦ ? ...... global reset start ¦ ¦ ? ? UP: napi_enable()(skip) ...... ¦ ¦ ? ? ...... napi_disable() In reset process, the driver will DOWN the port and then UINIT, in this case, the setup tc process will UP the port before UINIT, so cause the problem. Adds a DOWN process in UINIT to fix it.
Publication Date	Sept. 5, 2024, 5:15 a.m.
Registration Date	Sept. 5, 2024, noon
Last Update	Sept. 16, 2024, 3:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/67492d4d105c0a6321b00c393eec96b9a7a97a16	Patch
2	https://git.kernel.org/stable/c/fc250eca15bde34c4c8f806b9d88f55bd56a992c	Patch
3	https://git.kernel.org/stable/c/195918217448a6bb7f929d6a2ffffce9f1ece1cc	Patch
4	https://git.kernel.org/stable/c/6ae2b7d63cd056f363045eb65409143e16f23ae8	Patch
5	https://git.kernel.org/stable/c/fa1d4de7265c370e673583ac8d1bd17d21826cd9	Patch
6	https://git.kernel.org/stable/c/de37408d5c26fc4a296a28a0c96dcb814219bfa1	Patch
7	https://git.kernel.org/stable/c/be5e816d00a506719e9dbb1a9c861c5ced30a109	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-667	不適切なロック	https://cwe.mitre.org/data/definitions/667.html

JVN Vulnerability Information

Linux の Linux Kernel におけるリソースのロックに関する脆弱性

Title	Linux の Linux Kernel におけるリソースのロックに関する脆弱性
Summary	Linux の Linux Kernel には、リソースのロックに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 15, 2024, midnight
Registration Date	Sept. 9, 2024, 3:30 p.m.
Last Update	Sept. 2, 2025, 11:54 a.m.

Affected System

Linux

Linux Kernel 4.15 以上 5.4.283 未満

Linux Kernel 5.11 以上 5.15.166 未満

Linux Kernel 5.16 以上 6.1.107 未満

Linux Kernel 5.5 以上 5.10.225 未満

Linux Kernel 6.11

Linux Kernel 6.2 以上 6.6.48 未満

Linux Kernel 6.7 以上 6.10.7 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-44995	https://www.cve.org/CVERecord?id=CVE-2024-44995
National Vulnerability Database (NVD)
2	CVE-2024-44995	https://nvd.nist.gov/vuln/detail/CVE-2024-44995

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-667	http://cwe.mitre.org/data/definitions/667.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net: hns3: fix a deadlock problem when config TC during resetting (1959182)	https://git.kernel.org/stable/c/195918217448a6bb7f929d6a2ffffce9f1ece1cc
2	net: hns3: fix a deadlock problem when config TC during resetting (67492d4)	https://git.kernel.org/stable/c/67492d4d105c0a6321b00c393eec96b9a7a97a16
3	net: hns3: fix a deadlock problem when config TC during resetting (6ae2b7d)	https://git.kernel.org/stable/c/6ae2b7d63cd056f363045eb65409143e16f23ae8
4	net: hns3: fix a deadlock problem when config TC during resetting (be5e816)	https://git.kernel.org/stable/c/be5e816d00a506719e9dbb1a9c861c5ced30a109
5	net: hns3: fix a deadlock problem when config TC during resetting (de37408)	https://git.kernel.org/stable/c/de37408d5c26fc4a296a28a0c96dcb814219bfa1
6	net: hns3: fix a deadlock problem when config TC during resetting (fa1d4de)	https://git.kernel.org/stable/c/fa1d4de7265c370e673583ac8d1bd17d21826cd9
7	net: hns3: fix a deadlock problem when config TC during resetting (fc250ec)	https://git.kernel.org/stable/c/fc250eca15bde34c4c8f806b9d88f55bd56a992c
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年09月09日] 掲載	Sept. 9, 2024, 3:30 p.m.
2	[2025年08月18日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 18, 2025, 6 p.m.