Vulnerability feed

Executive summary

The advisory describes a race condition in the Linux kernel's Intel ICE network driver, which supports Intel Ethernet Controller E810 adapters. Under sustained network load on arm64 machines, this can crash the kernel. The advisory does not state a severity rating, and it describes a fix that restores ordered register writes in the transmit path.

Technical summary

The flaw is a memory ordering issue in the ice driver transmit path, where the tail doorbell is written with writel_relaxed() rather than writel(). On arm64, this can let the NIC start transmitting before the dynamic queue limit (DQL) byte count update is visible, which triggers a BUG_ON in dql_completed() and a kernel crash. The advisory describes the trigger as sustained network load on an Intel Ethernet Controller E810-XXV for SFP (rev 02) system, and states that the crash was reproduced reliably by the user. The fix restores writel() in the transmit doorbell path, reverting the change made in commit ccde82e90946. The advisory does not state affected or fixed version numbers, CVSS score, attack vector or privileges required, workarounds, or detection guidance.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affects

LinuxIntelLinuxLinux kernelIntel Ethernet Controller E810-XXV for SFP