Threats tagged 'ghsa-qh7q-28pc-c4hv'

A vulnerability in the Linux kernel's stmmac xgmac2 network driver caused an interrupt storm due to enabling the RX Buffer Unavailable (RBUE) interrupt by default. This interrupt storm occurs under heavy receive (RX) pressure when the DMA runs out of RX descriptors, firing RBUE continuously without forward progress, leading to degraded system performance. The issue was resolved by disabling RBUE in the default RX interrupt mask, preventing the interrupt storm while maintaining normal RX handling. This fix trades the storm for a clean stall with the same RX outcome. The vulnerability affects specific Linux kernel versions listed and has a CVSS score of 7.5, indicating medium severity with high impact on availability.