CVE-2024-35971

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: ks8851: Handle softirqs at the end of IRQ thread to fix hang

The ks8851_irq() thread may call ks8851_rx_pkts() in case there are

any packets in the MAC FIFO, which calls netif_rx(). This netif_rx()

implementation is guarded by local_bh_disable() and local_bh_enable().

The local_bh_enable() may call do_softirq() to run softirqs in case

any are pending. One of the softirqs is net_rx_action, which ultimately

reaches the driver .start_xmit callback. If that happens, the system

hangs. The entire call chain is below:

ks8851_start_xmit_par from netdev_start_xmit

netdev_start_xmit from dev_hard_start_xmit

dev_hard_start_xmit from sch_direct_xmit

sch_direct_xmit from __dev_queue_xmit

__dev_queue_xmit from __neigh_update

__neigh_update from neigh_update

neigh_update from arp_process.constprop.0

arp_process.constprop.0 from __netif_receive_skb_one_core

__netif_receive_skb_one_core from process_backlog

process_backlog from

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References