CVE-2024-46799 net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX
A NULL pointer dereference in the TI AM65-CPSW Ethernet driver causes a kernel crash when XDP_TX is used with a single TX queue.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-46799?
CVE-2024-46799 is a high-severity vulnerability in Linux kernel, published on 18 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX
If number of TX queues are set to 1 we get a NULL pointer dereference during XDP_TX.
~# ethtool -L eth0 tx 1 ~# ./xdp-trafficgen udp -A <ipv6-src> -a <ipv6-dst> eth0 -t 2 Transmitting on eth0 (ifindex 2) [ 241.135257] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000030
Fix this by using actual TX queues instead of max TX queues when picking the TX channel in am65_cpsw_ndo_xdp_xmit().
Weakness: CWE-476
Which versions are affected by CVE-2024-46799?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-46799?
Apply the vendor's patch.
Is CVE-2024-46799 being exploited?
There is no known exploitation of CVE-2024-46799 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-46799, DEBIAN-CVE-2024-46799, GHSA-rqgx-3q58-h4h3, UBUNTU-CVE-2024-46799.