whatthehell

CVEs.md

https://security-tracker.debian.org/tracker/CVE-2024-36004 https://www.tenable.com/plugins/nessus/228571

-> disable SR-IOV ?!

dmesg

[  237.867673] bond0: (slave eth6): link status down for interface, disabling it in 200 ms
[  237.877668] bond0: (slave eth6): link status down for interface, disabling it in 200 ms
[  237.881616] i40e 0000:b6:00.1 eth6: Changing Tx descriptor count from 512 to 4096.
[  237.882222] i40e 0000:b6:00.1 eth6: Changing Rx descriptor count from 512 to 4096
[  237.932563] (null): ipv6 inet device not found
[  237.987664] bond0: (slave eth6): link status down for interface, disabling it in 200 ms
[  237.994332] bond0: (slave eth6): link status down for interface, disabling it in 200 ms
[  237.999119] i40e 0000:b6:00.1: entering allmulti mode.
[  237.999384] ------------[ cut here ]------------
[  237.999386] workqueue: WQ_MEM_RECLAIM i40e:i40e_service_task [i40e] is flushing !WQ_MEM_RECLAIM infiniband:0x0
[  237.999422] WARNING: CPU: 4 PID: 3016 at kernel/workqueue.c:2649 check_flush_dependency+0x10b/0x120
[  237.999432] Modules linked in: veth nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount ipt_REJECT nf_reject_ipv4 xt_state xt_conntrack iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_filter xt_tcpudp ip_tables x_tables cpufreq_userspace mei_txe isofs sunrpc cifs cifs_arc4 cifs_md4 fscache netfs zfs(PO) spl(O) bridge stp llc bonding nls_utf8 nls_cp437 vfat fat vhost_vsock vmw_vsock_virtio_transport_common vsock vhost_net vhost vhost_iotlb tap af_packet fuse tun snd_pcm snd_timer snd soundcore pcspkr iTCO_wdt intel_pmc_bxt iTCO_vendor_support mfd_core efi_pstore mei_me mei irdma intel_pch_thermal ice ib_uverbs ib_core ipv6 i40e qat_c62x intel_qat authenc ioatdma igb i2c_algo_bit dca evdev dcdbas intel_rapl_msr coretemp intel_rapl_common nfit x86_pkg_temp_thermal intel_powerclamp kvm_intel kvm crct10dif_pclmul ghash_clmulni_intel sha256_ssse3 sha1_ssse3 aesni_intel crypto_simd cryptd rapl intel_cstate hed tpm_crb tpm_tis tpm_tis_core tpm rng_core
[  237.999509]  tiny_power_button sr_mod cdrom acpi_ipmi ipmi_si ipmi_devintf ipmi_msghandler acpi_pad uas efivarfs button crc32_pclmul i2c_i801 i2c_smbus xhci_pci xhci_pci_renesas xhci_hcd ahci libahci libata wmi simpledrm drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops cec drm agpgart i2c_core loop vfio_pci vfio_pci_core irqbypass vfio_virqfd vfio_iommu_type1 vfio ext4 crc32c_generic crc32c_intel crc16 mbcache jbd2 nvme nvme_core hwmon vmd usb_storage usbcore usb_common sd_mod t10_pi scsi_mod
[  237.999551] CPU: 4 PID: 3016 Comm: kworker/4:2 Tainted: P           O      5.15.152-0-lts #1-Alpine
[  237.999554] Hardware name: DELL VEP-4600/VEP-4600, BIOS 3.41.0.9-23 07/05/2022
[  237.999557] Workqueue: i40e i40e_service_task [i40e]
[  237.999574] RIP: 0010:check_flush_dependency+0x10b/0x120
[  237.999577] Code: ff 49 8b 54 24 18 48 8d 8b b0 00 00 00 49 89 e8 48 81 c6 b0 00 00 00 48 c7 c7 90 a2 05 b2 c6 05 b3 2f 28 01 01 e8 27 c2 7b 00 <0f> 0b e9 10 ff ff ff 80 3d a1 2f 28 01 00 75 94 e9 46 ff ff ff 41
[  237.999580] RSP: 0018:ffff9cf2c086bce8 EFLAGS: 00010282
[  237.999583] RAX: 0000000000000000 RBX: ffff8e38c4fd5400 RCX: ffff8e47ffd1c648
[  237.999585] RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff8e47ffd1c640
[  237.999587] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff9cf2c086bb20
[  237.999588] R10: ffff9cf2c086bb18 R11: ffff8e483ffc6ba8 R12: ffff8e38c15aacc0
[  237.999590] R13: ffff8e38cee3a680 R14: ffff8e38c4fd5468 R15: ffffbcf2bfb0d305
[  237.999591] FS:  0000000000000000(0000) GS:ffff8e47ffd00000(0000) knlGS:0000000000000000
[  237.999594] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.999595] CR2: 00007f4d36aaa000 CR3: 000000014020a002 CR4: 00000000007706e0
[  237.999598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.999599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  237.999601] PKRU: 55555554
[  237.999602] Call Trace:
[  237.999604]  <TASK>
[  237.999605]  ? __warn+0x80/0x100
[  237.999611]  ? check_flush_dependency+0x10b/0x120
[  237.999613]  ? report_bug+0x9e/0xc0
[  237.999620]  ? handle_bug+0x35/0x80
[  237.999625]  ? exc_invalid_op+0x14/0x70
[  237.999628]  ? asm_exc_invalid_op+0x16/0x20
[  237.999634]  ? check_flush_dependency+0x10b/0x120
[  237.999636]  ? check_flush_dependency+0x10b/0x120
[  237.999638]  flush_workqueue+0x12f/0x3e0
[  237.999642]  ib_cache_cleanup_one+0x1c/0xe0 [ib_core]
[  237.999689]  __ib_unregister_device+0x62/0xa0 [ib_core]
[  237.999715]  ib_unregister_device_and_put+0x34/0x50 [ib_core]
[  237.999741]  i40e_notify_client_of_netdev_close+0x54/0x70 [i40e]
[  237.999761]  i40e_service_task+0x4f5/0xa60 [i40e]
[  237.999779]  process_one_work+0x1e9/0x390
[  237.999782]  worker_thread+0x50/0x3c0
[  237.999785]  ? process_one_work+0x390/0x390
[  237.999787]  kthread+0x124/0x150
[  237.999792]  ? set_kthread_struct+0x50/0x50
[  237.999796]  ret_from_fork+0x1f/0x30
[  237.999801]  </TASK>
[  237.999802] ---[ end trace b5964d4ab01b39b2 ]---
[  238.916014] i40e 0000:b6:00.2: entering allmulti mode.
[  238.917916] i40e 0000:b6:00.3: entering allmulti mode.
[  238.918087] eth7 speed is unknown, defaulting to 1000
[  238.918091] eth8 speed is unknown, defaulting to 1000
[  238.976688] (null): ipv6 inet device not found
[  240.003359] (null): ipv6 inet device not found