In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
When getting the IRQ we use k3_udma_glue_tx_get_irq() which returns negative error value on error. So not NULL check is not sufficient to deteremine if IRQ is valid. Check that IRQ is greater then zero to ensure it is valid.
There is no issue at probe time but at runtime user can invoke .set_channels which results in the following call chain. am65_cpsw_set_channels() am65_cpsw_nuss_update_tx_rx_chns() am65_cpsw_nuss_remove_tx_chns() am65_cpsw_nuss_init_tx_chns()
At this point if am65_cpsw_nuss_init_tx_chns() fails due to k3_udma_glue_tx_get_irq() then tx_chn->irq will be set to a negative value.
Then, at subsequent .set_channels with higher channel count we will attempt to free an invalid IRQ in am65_cpsw_nuss_remove_tx_chns() leading to a kernel warning.
The issue is present in the original commit that introduced this driver, although there, am65_cpsw_nuss_update_tx_rx_chns() existed as am65_cpsw_nuss_update_tx_chns().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-64kb-extra | Mar 13, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-azure-fdeUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-awsUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1033-gcp | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub