In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtkethsoc: pass eth to mtkhandleirqrx in pollcontroller
mtkhandleirqrx expects a struct mtketh * (matching the requestirq cookie), but mtkpollcontroller incorrectly passed the netdevice *. Calling ndopollcontroller with CONFIGNETPOLL_CONTROLLER enabled would then crash.