CVE-2024-26854

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ice: fix uninitialized dplls mutex usage

The pf->dplls.lock mutex is initialized too late, after its first use.

Move it to the top of ice_dpll_init.

Note that the "err_exit" error path destroys the mutex. And the mutex is

the last thing destroyed in ice_dpll_deinit.

This fixes the following warning with CONFIG_DEBUG_MUTEXES:

ice 0000:10:00.0: The DDP package was successfully loaded: ICE OS Default Package version 1.3.36.0

ice 0000:10:00.0: 252.048 Gb/s available PCIe bandwidth (16.0 GT/s PCIe x16 link)

ice 0000:10:00.0: PTP init successful

------------[ cut here ]------------

DEBUG_LOCKS_WARN_ON(lock->magic != lock)

WARNING: CPU: 0 PID: 410 at kernel/locking/mutex.c:587 __mutex_lock+0x773/0xd40

Modules linked in: crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ice(+) nvme nvme_c>

CPU: 0 PID: 410 Comm: kworker/0:4 Not tainted 6.8.0-rc5+ #3

Hardware name: HPE ProLiant DL110 Gen10 Pl

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References