In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: mvneta: re-enable percpu interrupt on resume<\/p>\n
On Marvell MPIC platforms (Armada 370\/XP\/38x), mvneta uses a percpu
\nIRQ disable\/enable scheme for NAPI: the ISR (mvneta_percpu_isr) calls
\ndisable_percpu_irq() to mask the MPIC per-CPU interrupt and schedules
\nNAPI poll, which calls enable_percpu_irq() on completion to unmask.<\/p>\n
If suspend occurs while NAPI poll is pending (between
\ndisable_percpu_irq in the ISR and enable_percpu_irq in poll
\ncompletion), the interrupt is never re-enabled:<\/p>\n
1. mvneta_percpu_isr: disable_percpu_irq() + napi_schedule()
\n => MPIC masked, percpu_enabled cpumask bit cleared
\n 2. NAPI poll does not complete before suspend proceeds
\n (on PREEMPT_RT this is highly likely since softirqs run in
\n ksoftirqd which gets frozen; on non-RT it can happen when
\n softirq processing is deferred to ksoftirqd)
\n 3. mvneta_stop_dev => napi_disable(): cancels the pending poll
\n without executing the completion path
\n 4. suspend_device_irqs => IRQCHIP_MASK_ON_SUSPEND: masks MPIC
\n (already masked, but records IRQS_SUSPENDED)
\n 5. Resume: mpic_resume checks irq_percpu_is_enabled() => false
\n (bit was cleared in step 1) => skips unmask
\n 6. mvneta_start_dev only restores device-level INTR_NEW_MASK,
\n does not touch the MPIC per-CPU mask<\/p>\n
Result: MPIC per-CPU interrupt stays masked permanently. The NIC
\ngenerates interrupts (INTR_NEW_CAUSE != 0) but the CPU never
\nreceives them, causing complete loss of network connectivity.<\/p>\n
Fix by calling on_each_cpu(mvneta_percpu_enable) in the resume path
\nto unconditionally unmask the MPIC per-CPU interrupt regardless of
\npre-suspend state.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: mvneta: re-enable percpu interrupt on resume<\/p>\n
On Marvell MPIC platforms (Armada 370\/XP\/38x), mvneta uses a percpu
\nIRQ disable\/<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-7057","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/7057","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7057"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7057"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7057"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}