In the Linux kernel, the following vulnerability has been resolved:
sfc: fix null pointer dereference in efx_hard_start_xmit
Trying to get the channel from the tx_queue variable here is wrong because we can only be here if tx_queue is NULL, so we shouldn't dereference it. As the above comment in the code says, this is very unlikely to happen, but it's wrong anyway so let's fix it.
I hit this issue because of a different bug that caused tx_queue to be NULL. If that happens, this is the error message that we get here: BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [...] RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-sourceUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linuxUpgrade linux-gcpUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-gkeop-5.15Upgrade linux-nvidiaUpgrade linux-azure-fdeUpgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-oracle | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub