摘要:
In the Linux kernel, the following vulnerability has been resolved:
idpf: check error for register_netdev() on init
Current init logic ignores the error code from register_netdev(),
which will cause WARN_ON() on attempt to unregister it, if there was one,
and there is no info for the user that the creation of the netdev failed.
WARNING: CPU: 89 PID: 6902 at net/core/dev.c:11512 unregister_netdevice_many_notify+0x211/0x1a10
...
[ 3707.563641] unregister_netdev+0x1c/0x30
[ 3707.563656] idpf_vport_dealloc+0x5cf/0xce0 [idpf]
[ 3707.563684] idpf_deinit_task+0xef/0x160 [idpf]
[ 3707.563712] idpf_vc_core_deinit+0x84/0x320 [idpf]
[ 3707.563739] idpf_remove+0xbf/0x780 [idpf]
[ 3707.563769] pci_device_remove+0xab/0x1e0
[ 3707.563786] device_release_driver_internal+0x371/0x530
[ 3707.563803] driver_detach+0xbf/0x180
[ 3707.563816] bus_remove_driver+0x11b/0x2a0
[ 3707.563829] pci_unregister_driver+0x2a/0x250
Introduce an error check and log the vport number and error code.
On removal make sure to check VPORT_REG_NETDEV flag prior to calling
unregister and free on the netdev.
Add local variables for idx, vport_config and netdev for readability.
安全等级: Low
公告ID: KylinSec-SA-2025-2404
发布日期: 2025年6月3日
关联CVE: CVE-2025-22116
在Linux内核中，以下漏洞已修复：
idpf：初始化时检查register_netdev()的错误
当前初始化逻辑忽略了register_netdev()返回的错误码。如果注册时发生错误，在后续注销网卡时将触发WARN_ON警告，同时用户无法获知网卡创建失败的信息。
警告信息示例：
[ 3707.563641] unregister_netdev+0x1c/0x30
[ 3707.563656] idpf_vport_dealloc+0x5cf/0xce0 [idpf]
[ 3707.563684] idpf_deinit_task+0xef/0x160 [idpf]
[ 3707.563712] idpf_vc_core_deinit+0x84/0x320 [idpf]
[ 3707.563739] idpf_remove+0xbf/0x780 [idpf]
[ 3707.563769] pci_device_remove+0xab/0x1e0
[ 3707.563786] device_release_driver_internal+0x371/0x530
[ 3707.563803] driver_detach+0xbf/0x180
[ 3707.563816] bus_remove_driver+0x11b/0x2a0
[ 3707.563829] pci_unregister_driver+0x2a/0x250
修复内容：
1. 新增错误检查机制，并记录虚拟端口(vport)编号及错误码
2. 在移除操作时，调用unregister前会先检查VPORT_REG_NETDEV标志位
3. 添加本地变量idx、vport_config和netdev以提升代码可读性
4. 确保网卡对象在注销和释放前进行有效性验证
该修复通过增强错误处理流程，避免了因网卡初始化失败导致的潜在系统警告，并提升了内核日志的可追溯性。
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2025-22116 | KY3.4-5A | kernel | Unaffected |
| CVE-2025-22116 | V6 | kernel | Unaffected |
