[{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"d7999f5ea64b","status":"affected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.7","status":"affected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.710","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.8","status":"unaffected"}]}]

{"timestamp":"2025-02-11T21:47:57.227709Z","id":"CVE-2024-26854","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/intel/ice/ice_dpll.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"d7999f5ea64bb10d2857b8cbfe973be373bac7c9","lessThan":"db29ceff3e25c48907016da456a7cbee6310fd83","versionType":"git","status":"affected"},{"version":"d7999f5ea64bb10d2857b8cbfe973be373bac7c9","lessThan":"9224fc86f1776193650a33a275cac628952f80a9","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/intel/ice/ice_dpll.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.7","status":"affected"},{"version":"0","lessThan":"6.7","versionType":"semver","status":"unaffected"},{"version":"6.7.10","lessThanOrEqual":"6.7.*","versionType":"semver","status":"unaffected"},{"version":"6.8","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

OR
          *cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.7.10
          *cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*

CVE: https://git.kernel.org/stable/c/9224fc86f1776193650a33a275cac628952f80a9 Types: Patch

CVE: https://git.kernel.org/stable/c/db29ceff3e25c48907016da456a7cbee6310fd83 Types: Patch

kernel.org: https://git.kernel.org/stable/c/9224fc86f1776193650a33a275cac628952f80a9 Types: Patch

kernel.org: https://git.kernel.org/stable/c/db29ceff3e25c48907016da456a7cbee6310fd83 Types: Patch

https://git.kernel.org/stable/c/9224fc86f1776193650a33a275cac628952f80a9

https://git.kernel.org/stable/c/db29ceff3e25c48907016da456a7cbee6310fd83

CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA-ADP CWE-476

In the Linux kernel, the following vulnerability has been resolved:

ice: fix uninitialized dplls mutex usage

The pf->dplls.lock mutex is initialized too late, after its first use.
Move it to the top of ice_dpll_init.
Note that the "err_exit" error path destroys the mutex. And the mutex is
the last thing destroyed in ice_dpll_deinit.
This fixes the following warning with CONFIG_DEBUG_MUTEXES:

 ice 0000:10:00.0: The DDP package was successfully loaded: ICE OS Default Package version 1.3.36.0
 ice 0000:10:00.0: 252.048 Gb/s available PCIe bandwidth (16.0 GT/s PCIe x16 link)
 ice 0000:10:00.0: PTP init successful
 ------------[ cut here ]------------
 DEBUG_LOCKS_WARN_ON(lock->magic != lock)
 WARNING: CPU: 0 PID: 410 at kernel/locking/mutex.c:587 __mutex_lock+0x773/0xd40
 Modules linked in: crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ice(+) nvme nvme_c>
 CPU: 0 PID: 410 Comm: kworker/0:4 Not tainted 6.8.0-rc5+ #3
 Hardware name: HPE ProLiant DL110 Gen10 Plus/ProLiant DL110 Gen10 Plus, BIOS U56 10/19/2023
 Workqueue: events work_for_cpu_fn
 RIP: 0010:__mutex_lock+0x773/0xd40
 Code: c0 0f 84 1d f9 ff ff 44 8b 35 0d 9c 69 01 45 85 f6 0f 85 0d f9 ff ff 48 c7 c6 12 a2 a9 85 48 c7 c7 12 f1 a>
 RSP: 0018:ff7eb1a3417a7ae0 EFLAGS: 00010286
 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000
 RDX: 0000000000000002 RSI: ffffffff85ac2bff RDI: 00000000ffffffff
 RBP: ff7eb1a3417a7b80 R08: 0000000000000000 R09: 00000000ffffbfff
 R10: ff7eb1a3417a7978 R11: ff32b80f7fd2e568 R12: 0000000000000000
 R13: 0000000000000000 R14: 0000000000000000 R15: ff32b7f02c50e0d8
 FS:  0000000000000000(0000) GS:ff32b80efe800000(0000) knlGS:0000000000000000
 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 CR2: 000055b5852cc000 CR3: 000000003c43a004 CR4: 0000000000771ef0
 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 PKRU: 55555554
 Call Trace:
  <TASK>
  ? __warn+0x84/0x170
  ? __mutex_lock+0x773/0xd40
  ? report_bu

kernel.org https://git.kernel.org/stable/c/9224fc86f1776193650a33a275cac628952f80a9 [No types assigned]

kernel.org https://git.kernel.org/stable/c/db29ceff3e25c48907016da456a7cbee6310fd83 [No types assigned]