In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
Currently, HIP08 devices does not register the ptp devices, so the hdev->ptp is NULL. But the tx process would still try to set hardware time stamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.
[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018 ... [ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge] [ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge] [ 128.292938] sp : ffff800059b93140 [ 128.297200] x29: ffff800059b93140 x28: 0000000000003280 [ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080 [ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001 [ 128.315969] x23: 0000000000000000 x22: 0000000000000194 [ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000 [ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000 [ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24 [ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000 [ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368 [ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02 [ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0 [ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000 [ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff [ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294 [ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080 [ 128.390626] Call trace: [ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge] [ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3] [ 128.405468] xmit_one.constprop.0+0xc4/0x200 [ 128.410600] dev_hard_start_xmit+0x54/0xf0 [ 128.415556] sch_direct_xmit+0xe8/0x634 [ 128.420246] __dev_queue_xmit+0x224/0xc70 [ 128.425101] dev_queue_xmit+0x1c/0x40 [ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch] [ 128.435409] do_output+0x60/0x17c [openvswitch] [ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch] [ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch] [ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch] [ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch] [ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch] [ 128.471460] xmit_one.constprop.0+0xc4/0x200 [ 128.476561] dev_hard_start_xmit+0x54/0xf0 [ 128.481489] __dev_queue_xmit+0x968/0xc70 [ 128.486330] dev_queue_xmit+0x1c/0x40 [ 128.490856] ip_finish_output2+0x250/0x570 [ 128.495810] __ip_finish_output+0x170/0x1e0 [ 128.500832] ip_finish_output+0x3c/0xf0 [ 128.505504] ip_output+0xbc/0x160 [ 128.509654] ip_send_skb+0x58/0xd4 [ 128.513892] udp_send_skb+0x12c/0x354 [ 128.518387] udp_sendmsg+0x7a8/0x9c0 [ 128.522793] inet_sendmsg+0x4c/0x8c [ 128.527116] __sock_sendmsg+0x48/0x80 [ 128.531609] __sys_sendto+0x124/0x164 [ 128.536099] __arm64_sys_sendto+0x30/0x5c [ 128.540935] invoke_syscall+0x50/0x130 [ 128.545508] el0_svc_common.constprop.0+0x10c/0x124 [ 128.551205] do_el0_svc+0x34/0xdc [ 128.555347] el0_svc+0x20/0x30 [ 128.559227] el0_sync_handler+0xb8/0xc0 [ 128.563883] el0_sync+0x160/0x180
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Apr 1, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extra | Feb 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64k | Mar 28, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub