CVE-2022-48840

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix hang during reboot/shutdown

Recent commit 974578017fc1 ("iavf: Add waiting so the port is

initialized in remove") adds a wait-loop at the beginning of

iavf_remove() to ensure that port initialization is finished

prior unregistering net device. This causes a regression

in reboot/shutdown scenario because in this case callback

iavf_shutdown() is called and this callback detaches the device,

makes it down if it is running and sets its state to __IAVF_REMOVE.

Later shutdown callback of associated PF driver (e.g. ice_shutdown)

is called. That callback calls among other things sriov_disable()

that calls indirectly iavf_remove() (see stack trace below).

As the adapter state is already __IAVF_REMOVE then the mentioned

loop is end-less and shutdown process hangs.

The patch fixes this by checking adapter's state at the beginning

of iavf_remove() and skips the rest of the function if the adapter

is already in remove

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References