In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
Currently, HIP08 devices does not register the ptp devices, so the hdev->ptp is NULL. But the tx process would still try to set hardware time stamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.
[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018 ... [ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge] [ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge] [ 128.292938] sp : ffff800059b93140 [ 128.297200] x29: ffff800059b93140 x28: 0000000000003280 [ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080 [ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001 [ 128.315969] x23: 0000000000000000 x22: 0000000000000194 [ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000 [ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000 [ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24 [ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000 [ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368 [ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02 [ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0 [ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000 [ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff [ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294 [ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080 [ 128.390626] Call trace: [ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge] [ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3] [ 128.405468] xmit_one.constprop.0+0xc4/0x200 [ 128.410600] dev_hard_start_xmit+0x54/0xf0 [ 128.415556] sch_direct_xmit+0xe8/0x634 [ 128.420246] __dev_queue_xmit+0x224/0xc70 [ 128.425101] dev_queue_xmit+0x1c/0x40 [ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch] [ 128.435409] do_output+0x60/0x17c [openvswitch] [ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch] [ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch] [ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch] [ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch] [ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch] [ 128.471460] xmit_one.constprop.0+0xc4/0x200 [ 128.476561] dev_hard_start_xmit+0x54/0xf0 [ 128.481489] __dev_queue_xmit+0x968/0xc70 [ 128.486330] dev_queue_xmit+0x1c/0x40 [ 128.490856] ip_finish_output2+0x250/0x570 [ 128.495810] __ip_finish_output+0x170/0x1e0 [ 128.500832] ip_finish_output+0x3c/0xf0 [ 128.505504] ip_output+0xbc/0x160 [ 128.509654] ip_send_skb+0x58/0xd4 [ 128.513892] udp_send_skb+0x12c/0x354 [ 128.518387] udp_sendmsg+0x7a8/0x9c0 [ 128.522793] inet_sendmsg+0x4c/0x8c [ 128.527116] __sock_sendmsg+0x48/0x80 [ 128.531609] __sys_sendto+0x124/0x164 [ 128.536099] __arm64_sys_sendto+0x30/0x5c [ 128.540935] invoke_syscall+0x50/0x130 [ 128.545508] el0_svc_common.constprop.0+0x10c/0x124 [ 128.551205] do_el0_svc+0x34/0xdc [ 128.555347] el0_svc+0x20/0x30 [ 128.559227] el0_sync_handler+0xb8/0xc0 [ 128.563883] el0_sync+0x160/0x180
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Apr 1, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-macrosUpgrade dtb-xilinx | Feb 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-raspi | Mar 28, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub