CVE-2023-53114

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix kernel crash during reboot when adapter is in recovery mode

If the driver detects during probe that firmware is in recovery

mode then i40e_init_recovery_mode() is called and the rest of

probe function is skipped including pci_set_drvdata(). Subsequent

i40e_shutdown() called during shutdown/reboot dereferences NULL

pointer as pci_get_drvdata() returns NULL.

To fix call pci_set_drvdata() also during entering to recovery mode.

Reproducer:

1) Lets have i40e NIC with firmware in recovery mode

2) Run reboot

Result:

[ 139.084698] i40e: Intel(R) Ethernet Connection XL710 Network Driver

[ 139.090959] i40e: Copyright (c) 2013 - 2019 Intel Corporation.

[ 139.108438] i40e 0000:02:00.0: Firmware recovery mode detected. Limiting functionality.

[ 139.116439] i40e 0000:02:00.0: Refer to the Intel(R) Ethernet Adapters and Devices User Guide for details on firmware recovery mode.

[ 139.129499] i40e 0000:02:00.0: fw 8

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References