net: mscc: ocelot: Fix crash when adding interface under a lag
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.198, 6.1.161, 6.6.121, 6.12.66, 6.18.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix crash when adding interface under a lag Commit 15faa1f67ab4 ("lan966x: Fix crash when adding interface under a lag") fixed a similar issue in the lan966x driver caused by a NULL pointer dereference. The ocelot_set_aggr_pgids() function in the ocelot driver has similar logic and is susceptible to the same crash. This issue specifically affects the ocelot_vsc7514.c frontend, which leaves unused ports as NULL pointers. The felix_vsc9959.c frontend is unaffected as it uses the DSA framework which registers all ports. Fix this by checking if the port pointer is valid before accessing it.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 528d3f190c98c8f7d9581f68db4af021696727b2 · fixed in 8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d; From 528d3f190c98c8f7d9581f68db4af021696727b2 · fixed in b17818307446c5a8d925a39a792261dbfa930041; From 528d3f190c98c8f7d9581f68db4af021696727b2 · fixed in 2985712dc76dfa670eb7fd607c09d4d48e5f5c6e; From 528d3f190c98c8f7d9581f68db4af021696727b2 · fixed in 03fb1708b7d1e76aecebf767ad059c319845039f; From 528d3f190c98c8f7d9581f68db4af021696727b2 · fixed in f490af47bbee02441e356a1e0b86e3b3dd5120ff; From 528d3f190c98c8f7d9581f68db4af021696727b2 · fixed in 34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95
- Linux Linux
5.12
- KernelLinux
From 5.12.0 · fixed in 5.15.198; From 5.16.0 · fixed in 6.1.161; From 6.2.0 · fixed in 6.6.121; From 6.7.0 · fixed in 6.12.66; From 6.13.0 · fixed in 6.18.6