{"id":"CVE-2024-36020","revision":"bac1910eff554044a70fb328ea748efc","records":[{"revision":"bac1910eff554044a70fb328ea748efc","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-36020","aliases":[],"title":"i40e: fix vf may be used uninitialized in this function warning","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix vf may be used uninitialized in this function warning\n\nTo fix the regression introduced by commit 52424f974bc5, which causes\nservers hang in very hard to reproduce conditions with resets races.\nUsing two sources for the information is the root cause.\nIn this function before the fix bumping v didn't mean bumping vf\npointer. But the code used this variables interchangeably, so stale vf\ncould point to different/not intended vf.\n\nRemove redundant \"v\" variable and iterate via single VF pointer across\nwhole function instead to guarantee VF pointer validity.","state":0,"publishedAt":"2024-05-30T14:59:44.447+00:00","modifiedAt":"2026-10-15T00:42:15.907+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"76ed715836c6994bac29d9638e9314e6e3b08651\",\n                            \"lessThan\": \"cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e88c2a1e28c5475065563d66c07ca879a9afbd07\",\n                            \"lessThan\": \"9dcf0fcb80f6aeb01469e3c957f8d4c97365450a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9abae363af5ced6adbf04c14366289540281fb26\",\n                            \"lessThan\": \"b8e82128b44fa40bf99a50b919488ef361e1683c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c39de3ae5075ea5f78e097cb5720d4e52d5caed9\",\n                            \"lessThan\": \"951d2748a2a8242853abc3d0c153ce4bf8faad31\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"52424f974bc53c26ba3f00300a00e9de9afcd972\",\n                            \"lessThan\": \"3e89846283f3cf7c7a8e28b342576fd7c561d2ba\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"52424f974bc53c26ba3f00300a00e9de9afcd972\",\n                            \"lessThan\": \"0dcf573f997732702917af1563aa2493dc772fc0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"52424f974bc53c26ba3f00300a00e9de9afcd972\",\n                            \"lessThan\": \"06df7618f591b2dc43c59967e294d7b9fc8675b6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"52424f974bc53c26ba3f00300a00e9de9afcd972\",\n                            \"lessThan\": \"f37c4eac99c258111d414d31b740437e1925b8e8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"02f949747e6fb767b29f7931d4bbf40911684e7a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4.19.264\",\n                            \"lessThan\": \"4.19.312\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.223\",\n                            \"lessThan\": \"5.4.274\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.153\",\n                            \"lessThan\": \"5.10.215\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.77\",\n                            \"lessThan\": \"5.15.154\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.0.7\",\n                            \"lessThan\": \"6.1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.1\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.312\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.274\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.215\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.154\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.85\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.26\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8.5\",\n                            \"lessThanOrEqual\": \"6.8.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/cc9cd02dd9e8b7764ea9effb24f4f1dd73d1b23d","https://git.kernel.org/stable/c/9dcf0fcb80f6aeb01469e3c957f8d4c97365450a","https://git.kernel.org/stable/c/b8e82128b44fa40bf99a50b919488ef361e1683c","https://git.kernel.org/stable/c/951d2748a2a8242853abc3d0c153ce4bf8faad31","https://git.kernel.org/stable/c/3e89846283f3cf7c7a8e28b342576fd7c561d2ba","https://git.kernel.org/stable/c/0dcf573f997732702917af1563aa2493dc772fc0","https://git.kernel.org/stable/c/06df7618f591b2dc43c59967e294d7b9fc8675b6","https://git.kernel.org/stable/c/f37c4eac99c258111d414d31b740437e1925b8e8"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-36020","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-36020","identifiers":["CVE-2024-36020"]},"retained":false,"historicalAffected":[]}],"coverage":[]}