In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: bcmgenet: keep RBUF EEE\/PM disabled<\/p>\n
Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_CTRL breaks the RX
\npath on GENET hardware once MAC EEE becomes active. RX traffic stops
\nflowing while the link stays up and the usual descriptor\/RX error
\ncounters remain quiet. In that state the MAC still accepts frames
\n(rbuf_ovflow_cnt keeps climbing) but RBUF no longer forwards them to
\nDMA, so rx_packets is no longer incremented at the netdev level. On
\nsome boards the corruption ends up as a paging fault in
\nskb_release_data via bcmgenet_rx_poll on an LPI exit.<\/p>\n
Reproduced on Pi 4B (BCM2711 + BCM54213PE) and confirmed by Florian
\nFainelli on an internal Broadcom 4908-family board with the same crash
\nsignature. RBUF_PM_EN is not publicly documented.<\/p>\n
This shows up more often now that phy_support_eee() enables EEE by
\ndefault, but it also affects older kernels as soon as TX LPI is
\nturned on via ethtool, so it is not specific to recent changes.<\/p>\n
Always clear RBUF_EEE_EN | RBUF_PM_EN in bcmgenet_eee_enable_set so
\nthe bits stay off across resets. UMAC and TBUF setup is left alone so
\nTX-side EEE keeps working.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: bcmgenet: keep RBUF EEE\/PM disabled<\/p>\n
Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_CTRL breaks the RX
\npath on GENET hardware<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-15092","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/15092","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15092"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15092"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15092"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}