In the Linux kernel, the following vulnerability has been resolved:
sfc: fix null pointer dereference in efx_hard_start_xmit
Trying to get the channel from the tx_queue variable here is wrong because we can only be here if tx_queue is NULL, so we shouldn't dereference it. As the above comment in the code says, this is very unlikely to happen, but it's wrong anyway so let's fix it.
I hit this issue because of a different bug that caused tx_queue to be NULL. If that happens, this is the error message that we get here: BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [...] RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-default | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-azure-fde-5.15Upgrade linux-intel-iotgUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-gkeUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-aws | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub