Description
In the Linux kernel, the following vulnerability has been resolved: iavf: free q_vectors before queues in iavf_disable_vf iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_vf(). This resolves a panic encountered when the interface is disabled and then later brought up again after PF communication is restored.
References (4)
Core 4
Core References
Scores
CVSS v3
7.8
EPSS
0.0024
EPSS Percentile
15.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (12)
Linux/Linux
< 4.13
Linux/Linux
4.13
Linux/Linux
5.10.82 - 5.10.*
Linux/Linux
5.15.5 - 5.15.*
Linux/Linux
5.16
Linux/Linux
5.4.162 - 5.4.*
Linux/Linux
65c7006f234c9ede887d468f595f259a5c5cc552 - 78638b47132244e3934dc5dc79f6372d5ce8e98c
Linux/Linux
65c7006f234c9ede887d468f595f259a5c5cc552 - 89f22f129696ab53cfbc608e0a2184d0fea46ac1
Linux/Linux
65c7006f234c9ede887d468f595f259a5c5cc552 - 926e8c83d4c1c2dac0026637eb0d492df876489e
Linux/Linux
65c7006f234c9ede887d468f595f259a5c5cc552 - 9ef6589cac9a8c47f5544ccdf4c498093733bb3f
... and 2 more
Published
Apr 10, 2024
Tracked Since
Feb 18, 2026