CVE-2024-46799

net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX

State: Published
Severity: 7.5 High
Published: Sep 18, 2024
Updated: Aug 5, 2026
Reserved: Sep 11, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX

If number of TX queues are set to 1 we get a NULL pointer dereference during XDP_TX.

~# ethtool -L eth0 tx 1 ~# ./xdp-trafficgen udp -A <ipv6-src> -a <ipv6-dst> eth0 -t 2 Transmitting on eth0 (ifindex 2) [ 241.135257] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000030

Fix this by using actual TX queues instead of max TX queues when picking the TX channel in am65_cpsw_ndo_xdp_xmit().

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8acacc40f7337527ff84cd901ed2ef0a2b95b2b6 to before 2e7189d2b1de51fc2567676cd4f96c0fe0960b9fAffected 8acacc40f7337527ff84cd901ed2ef0a2b95b2b6 to before 0a50c35277f96481a5a6ed5faf347f282040c57dAffected
LinuxLinux	6.10Affected before 6.10Not affected 6.10.10 through 6.10.*Not affected 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.