CVE-2024-36887 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: e1000e: change usleep_range to udelay in PHY mdic access This is a partial revert of commit 6dbdd4de0362 ("e1000e: Workaround for sporadic MDI error on Meteor Lake systems"). The referenced commit used usleep_range inside the PHY access routines, which are sometimes called from an atomic context. This can lead to a kernel panic in some scenarios, such as cable disconnection and reconnection on vPro systems. Solve this by changing the usleep_range calls back to udelay.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778
https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57
https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d
https://lore.kernel.org/linux-cve-announce/2024053033-CVE-2024-36887-6a66@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-36887
https://www.cve.org/CVERecord?id=CVE-2024-36887

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-30T15:28:55.630Z

Updated: 2025-05-04T09:11:26.182Z

Reserved: 2024-05-30T15:25:07.065Z

Link: CVE-2024-36887

Vulnrichment

Updated: 2024-08-02T03:43:50.019Z

NVD

Status : Awaiting Analysis

Published: 2024-05-30T16:15:12.243

Modified: 2024-11-21T09:22:44.220

Link: CVE-2024-36887

Redhat

Severity : Low

Publid Date: 2024-05-30T00:00:00Z

Links: CVE-2024-36887 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-36887", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-30T15:25:07.065Z", "datePublished": "2024-05-30T15:28:55.630Z", "dateUpdated": "2025-05-04T09:11:26.182Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-05-04T09:11:26.182Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ne1000e: change usleep_range to udelay in PHY mdic access\n\nThis is a partial revert of commit 6dbdd4de0362 (\"e1000e: Workaround\nfor sporadic MDI error on Meteor Lake systems\"). The referenced commit\nused usleep_range inside the PHY access routines, which are sometimes\ncalled from an atomic context. This can lead to a kernel panic in some\nscenarios, such as cable disconnection and reconnection on vPro systems.\n\nSolve this by changing the usleep_range calls back to udelay."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/intel/e1000e/phy.c"], "versions": [{"version": "1d16cd91cd319d5bf6230c8493feb56a61e486a1", "lessThan": "f8a139656c95db893a543159873c57a470d7376d", "status": "affected", "versionType": "git"}, {"version": "0a4e3c2d976aa4dd38951afd6267f74ef3fade0e", "lessThan": "950d5226cd6bb83ba720961a8d4d5cf79e6afd57", "status": "affected", "versionType": "git"}, {"version": "6dbdd4de0362c37e54e8b049781402e5a409e7d0", "lessThan": "387f295cb2150ed164905b648d76dfcbd3621778", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/intel/e1000e/phy.c"], "versions": [{"version": "6.6.26", "lessThan": "6.6.31", "status": "affected", "versionType": "semver"}, {"version": "6.8.5", "lessThan": "6.8.10", "status": "affected", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.26", "versionEndExcluding": "6.6.31"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8.5", "versionEndExcluding": "6.8.10"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d"}, {"url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57"}, {"url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778"}], "title": "e1000e: change usleep_range to udelay in PHY mdic access", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36887", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T17:21:16.500731Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:47:39.644Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:50.019Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:50.019Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36887", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T17:21:16.500731Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T17:21:28.449Z"}}], "cna": {"title": "e1000e: change usleep_range to udelay in PHY mdic access", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1d16cd91cd31", "lessThan": "f8a139656c95", "versionType": "git"}, {"status": "affected", "version": "0a4e3c2d976a", "lessThan": "950d5226cd6b", "versionType": "git"}, {"status": "affected", "version": "6dbdd4de0362", "lessThan": "387f295cb215", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/intel/e1000e/phy.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.6.26", "lessThan": "6.6.31", "versionType": "custom"}, {"status": "affected", "version": "6.8.5", "lessThan": "6.8.10", "versionType": "custom"}], "programFiles": ["drivers/net/ethernet/intel/e1000e/phy.c"], "defaultStatus": "unaffected"}], "references": [{"url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d"}, {"url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57"}, {"url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ne1000e: change usleep_range to udelay in PHY mdic access\n\nThis is a partial revert of commit 6dbdd4de0362 (\"e1000e: Workaround\nfor sporadic MDI error on Meteor Lake systems\"). The referenced commit\nused usleep_range inside the PHY access routines, which are sometimes\ncalled from an atomic context. This can lead to a kernel panic in some\nscenarios, such as cable disconnection and reconnection on vPro systems.\n\nSolve this by changing the usleep_range calls back to udelay."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-30T15:28:55.630Z"}}}, "cveMetadata": {"cveId": "CVE-2024-36887", "state": "PUBLISHED", "dateUpdated": "2024-08-02T03:43:50.019Z", "dateReserved": "2024-05-30T15:25:07.065Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-30T15:28:55.630Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ne1000e: change usleep_range to udelay in PHY mdic access\n\nThis is a partial revert of commit 6dbdd4de0362 (\"e1000e: Workaround\nfor sporadic MDI error on Meteor Lake systems\"). The referenced commit\nused usleep_range inside the PHY access routines, which are sometimes\ncalled from an atomic context. This can lead to a kernel panic in some\nscenarios, such as cable disconnection and reconnection on vPro systems.\n\nSolve this by changing the usleep_range calls back to udelay."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: e1000e: cambie usleep_range a udelay en el acceso mdic de PHY. Esta es una reversi\u00f3n parcial de el commit 6dbdd4de0362 (\"e1000e: soluci\u00f3n alternativa para errores MDI espor\u00e1dicos en sistemas Meteor Lake\"). El commit a la que se hace referencia us\u00f3 usleep_range dentro de las rutinas de acceso PHY, que a veces se llaman desde un contexto at\u00f3mico. Esto puede provocar un p\u00e1nico en el kernel en algunos escenarios, como la desconexi\u00f3n y reconexi\u00f3n de cables en sistemas vPro. Resuelva esto volviendo a cambiar las llamadas usleep_range a udelay."}], "id": "CVE-2024-36887", "lastModified": "2024-11-21T09:22:44.220", "metrics": {}, "published": "2024-05-30T16:15:12.243", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}