CVE-2024-46799

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-46799
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46799.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-46799
Downstream
Published
2024-09-18T07:12:53.508Z
Modified
2025-11-20T05:55:40.213550Z
Summary
net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX

If number of TX queues are set to 1 we get a NULL pointer dereference during XDP_TX.

~# ethtool -L eth0 tx 1 ~# ./xdp-trafficgen udp -A <ipv6-src> -a <ipv6-dst> eth0 -t 2 Transmitting on eth0 (ifindex 2) [ 241.135257] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000030

Fix this by using actual TX queues instead of max TX queues when picking the TX channel in am65cpswndoxdpxmit().

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8acacc40f7337527ff84cd901ed2ef0a2b95b2b6
Fixed
2e7189d2b1de51fc2567676cd4f96c0fe0960b9f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8acacc40f7337527ff84cd901ed2ef0a2b95b2b6
Fixed
0a50c35277f96481a5a6ed5faf347f282040c57d

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.2
v6.10.3
v6.10.4
v6.10.5
v6.10.6
v6.10.7
v6.10.8
v6.10.9
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.9
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.10.10