bnxt_en: Fix call to hardware monitoring event handler
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.110, 6.18.52, 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix call to hardware monitoring event handler The first parameter of hwmon_notify_event() is supposed to be the hardware monitoring device. The bnxt driver calls it with the platform device as first parameter instead. This API break results in undefined behavior and may result in a crash. Pass the hardware monitoring device as parameter instead to fix the problem.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From a19b4801457b0806c0153dc344f548c6f8615896 · fixed in e3cad8389a72b8a309b5689c1683310126b0d7da; From a19b4801457b0806c0153dc344f548c6f8615896 · fixed in 001ff5d8e68aacd91768b824b930dd7e68db6688; From a19b4801457b0806c0153dc344f548c6f8615896 · fixed in b17907ef665bc76a495a8f909f74656d3f32b7a2; From a19b4801457b0806c0153dc344f548c6f8615896 · fixed in 622d698df4239fef3e0eb51fe59f4198f957f28a
- Linux Linux
6.7
- KernelLinux
From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6