In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: sparx5: fix sleep in atomic context in MAC table access<\/p>\n
sparx5_set_rx_mode() runs with netif_addr_lock_bh held and iterates
\ndev->mc via __dev_mc_sync(), which per address calls sparx5_mc_sync() \/
\nsparx5_mc_unsync() -> sparx5_mact_learn() \/ sparx5_mact_forget(). These
\ntake sparx5->lock, a mutex, and then poll the MAC access command
\nregister with readx_poll_timeout(). A mutex may block, which is not
\nallowed from atomic context.<\/p>\n
Convert the driver to the new .ndo_set_rx_mode_async callback introduced
\nin commit 3554b4345d85 (“net: introduce ndo_set_rx_mode_async and
\nnetdev_rx_mode_work”). The async callback is invoked from process
\ncontext, so the mutex and sleeping completion poll can remain.<\/p>\n
Observed with CONFIG_PROVE_LOCKING, CONFIG_DEBUG_SPINLOCK,
\nCONFIG_DEBUG_MUTEXES and CONFIG_DEBUG_ATOMIC_SLEEP enabled:<\/p>\n
BUG: sleeping function called from invalid context at kernel\/locking\/mutex.c:591
\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 217, name: ip
\n preempt_count: 201, expected: 0
\n Call trace:
\n __might_resched+0x144\/0x248
\n __might_sleep+0x48\/0x7c
\n __mutex_lock+0x74\/0x850
\n mutex_lock_nested+0x24\/0x30
\n sparx5_mact_learn+0x78\/0x100
\n sparx5_mc_sync+0x40\/0x54
\n __hw_addr_sync_dev+0xc4\/0x170
\n sparx5_set_rx_mode+0x4c\/0x58
\n __dev_set_rx_mode+0x64\/0xa4
\n __dev_open+0x1ec\/0x26c<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: sparx5: fix sleep in atomic context in MAC table access<\/p>\n
sparx5_set_rx_mode() runs with netif_addr_lock_bh held and iterates
\nd<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25507","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}