CVE-2021-46914

published 2024-02-27

CVE-2021-46914: In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix unbalanced device enable/disable in suspend/resume pci_disable_device() called…

Priority P4 18 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

ixgbe: fix unbalanced device enable/disable in suspend/resume

pci_disable_device() called in __ixgbe_shutdown() decreases
dev->enable_cnt by 1. pci_enable_device_mem() which increases
dev->enable_cnt by 1, was removed from ixgbe_resume() in commit
6f82b2558735 ("ixgbe: use generic power management"). This caused
unbalanced increase/decrease. So add pci_enable_device_mem() back.

Fix the following call trace.

ixgbe 0000:17:00.1: disabling already-disabled device
Call Trace:
__ixgbe_shutdown+0x10a/0x1e0 [ixgbe]
ixgbe_suspend+0x32/0x70 [ixgbe]
pci_pm_suspend+0x87/0x160
? pci_pm_freeze+0xd0/0xd0
dpm_run_callback+0x42/0x170
__device_suspend+0x114/0x460
async_suspend+0x1f/0xa0
async_run_entry_fn+0x3c/0xf0
process_one_work+0x1dd/0x410
worker_thread+0x34/0x3f0
? cancel_delayed_work+0x90/0x90
kthread+0x14c/0x170
? kthread_park+0x90/0x90
ret_from_fork+0x1f/0x30

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.10.38-1 (bookworm)	linux 5.10.38-1 (bookworm)
linux	linux	—	—
linux	linux	>= 6f82b25587354ce7c9c42e0b53d8b0770b900847 < be07581aacae7cd0a073afae8e8862032f794309	be07581aacae7cd0a073afae8e8862032f794309
linux	linux	>= 6f82b25587354ce7c9c42e0b53d8b0770b900847 < f1b4be4a753caa4056496f679d70550d0c11a264	f1b4be4a753caa4056496f679d70550d0c11a264
linux	linux	>= 6f82b25587354ce7c9c42e0b53d8b0770b900847 < debb9df311582c83fe369baa35fa4b92e8a9c58a	debb9df311582c83fe369baa35fa4b92e8a9c58a
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 0 < 5.10.38-1	5.10.38-1
linux	linux_kernel	>= 5.11.0 < 5.11.16	5.11.16
linux	linux_kernel	>= 5.9.0 < 5.10.32	5.10.32

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.