sfc: fix NULL dereferences in ef100_process_design_param()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.57, 6.14.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 98ff4c7c8ac7f5339aac6114105395fea19f992e · fixed in a9703b006a475f474a571801ad3dd9b1bda35273; From 98ff4c7c8ac7f5339aac6114105395fea19f992e · fixed in f21623b8446735b5e2ac5f8ee69b8743177d7b19; From 98ff4c7c8ac7f5339aac6114105395fea19f992e · fixed in e56391011381d6d029da377a65ac314cb3d5def2; From 98ff4c7c8ac7f5339aac6114105395fea19f992e · fixed in 8241ecec1cdc6699ae197d52d58e76bddd995fa5
- Linux Linux
6.0
- KernelLinux
From 6.0.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.57; From 6.13.0 · fixed in 6.14.2