CVE-2024-53048

Summary

CVE-2024-53048 is a vulnerability in the Linux kernel that affects the probing of Intel E810 Lan On Motherboard (LOM) designs with DPLL (Dynamic Power and Clocking) support. The issue arises due to a mismatch between the number of DPLL pins enabled by the LOM vendor and the static values defined in the driver. This discrepancy causes a crash during the ice driver probe. To prevent the crash and allow for generic pin initialization within the Linux DPLL subsystem, a new solution is in development that will be based on "per HW design" pin initialization, requiring dynamically acquired pin information from the firmware.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.