In the Linux kernel, the following vulnerability has been resolved:
net: fec: handle page_pool_dev_alloc_pages error
The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash.
This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q.
Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash.
This commit handles the allocation error by dropping the current packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdso | Feb 12, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04bUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-lowlatency-hwe-22.04 | Apr 24, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub