| The CVE-2021-46914 vulnerability affects the Linux kernel, specifically the ixgbe driver, which is used for Intel 10GbE network cards. The issue arises from an unbalanced device enable/disable in suspend/resume operations. |
| |
| When a device is suspended, `pci_disable_device()` is called in `__ixgbe_shutdown()`, which decrements the `dev->enable_cnt` by 1. However, when the device resumes, `pci_enable_device_mem()` was removed in commit 6f82b2558735 ("ixgbe: use generic power management"), causing an unbalanced increase/decrease of `dev->enable_cnt`. To fix this, `pci_enable_device_mem()` needs to be added back to `ixgbe_resume()`. |
| |
| This vulnerability can lead to a call trace error, where the device is reported as already disabled during shutdown. The affected files are in `drivers/net/ethernet/intel/ixgbe/ixgbe_main.c`. |
| |
| The issue was introduced in kernel version 5.9 and fixed in versions 5.10.32, 5.11.16, and 5.12. To mitigate this vulnerability, it is recommended to update to the latest stable kernel version. If updating is not possible, individual changes can be applied from the specified commits. |
| |
