Riskcovery

CVE-2022-48648

sfc: fix null pointer dereference in efx_hard_start_xmit

State
Published
Severity
Not scored
Published
Apr 28, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix null pointer dereference in efx_hard_start_xmit

Trying to get the channel from the tx_queue variable here is wrong because we can only be here if tx_queue is NULL, so we shouldn't dereference it. As the above comment in the code says, this is very unlikely to happen, but it's wrong anyway so let's fix it.

I hit this issue because of a different bug that caused tx_queue to be NULL. If that happens, this is the error message that we get here: BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 [...] RIP: 0010:efx_hard_start_xmit+0x153/0x170 [sfc]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 12804793b17c0e19115a90d98f2f3df0cb79e233 to before b3b41d4d95d3822b2e459ecbc80d030ea6aec5e7Affected
  • 12804793b17c0e19115a90d98f2f3df0cb79e233 to before 8547c7bfc0617e7184e4da65b9b96681fcfe9998Affected
  • 12804793b17c0e19115a90d98f2f3df0cb79e233 to before b3b952168ee1f220ba729fa100fd9d5aa752eb03Affected
  • 12804793b17c0e19115a90d98f2f3df0cb79e233 to before 0a242eb2913a4aa3d6fbdb86559f27628e9466f3Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.146 through 5.10.*Not affected
  • 5.15.71 through 5.15.*Not affected
  • 5.19.12 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.