CVE-2024-36919

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37

Description: A vulnerability in the Linux kernel has been resolved, related to the bnx2fc component. The issue arises from the improper use of spin lock bh when releasing resources after an upload, which can lead to a kernel bug and potentially cause a system crash. The vulnerability is due to the sequential nature of offload and upload calls, making the lock unnecessary. This vulnerability can be exploited to cause a denial of service.

Recommendations: To resolve this issue, update the Linux kernel to version 6.6.37 or later. This update removes the unnecessary spin lock bh, preventing the kernel bug and potential system crash. Ensure that all affected systems are updated to this version or later to mitigate the risk of exploitation.