CVE-2024-46770: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-46770 affects the Linux kernel's Intel ICE (Intel® Ethernet Controller E810) driver. The vulnerability was discovered when ethtool callbacks could be executed while reset is in progress, potentially accessing deleted resources and resulting in a NULL pointer dereference. The issue affects Linux kernel versions from 4.17 up to (excluding) 6.1.110, from 6.2 up to (excluding) 6.6.51, from 6.7 up to (excluding) 6.10.10, and various 6.11 release candidates (NVD).

The vulnerability occurs in the Linux kernel's ICE driver during the PF (Physical Function) reset flow. When a reset is triggered via echo 1 > /sys/class/net//device/reset, ethtool commands executed during the reset process can attempt to access deleted resources. Specifically, attempting to get coalesce settings using ethtool -c results in a NULL pointer dereference at address 0x20. The issue stems from the driver not properly handling resource access during reset operations. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can lead to a NULL pointer dereference in the kernel, potentially causing a system crash or denial of service when ethtool commands are executed during device reset operations (NVD).

The vulnerability has been fixed by adding netif_device_attach/detach calls into the PF reset flow. The fix involves calling netif_device_detach() before reset to prevent the net core from calling the driver during ethtool operations, and netif_device_attach() after reset completion to safely resume operations. The fix has been implemented in various kernel versions through patches (Kernel Patch).