In the Linux kernel, the following vulnerability has been resolved:
sfc: fix null pointer dereference in efx_hard_start_xmit
Trying to get the channel from the tx_queue variable here is wrong because we can only be here if tx_queue is NULL, so we shouldn't dereference it. As the above comment in the code says, this is very unlikely to happen, but it's wrong anyway so let's fix it.
I hit this issue because of a different bug that caused tx_queue to be NULL. If that happens, this is the error message that we get here: BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [...] RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_debug | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-gcpUpgrade linux-awsUpgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-azureUpgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-gkeop-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-azure-fde-5.15Upgrade linux-azure-5.15 | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub