In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: macb: fix NULL pointer dereference on unbind with fixed-link<\/p>\n
When the device tree describes a fixed-link and has no “mdio” child
\nnode, macb_mii_init() returns early without allocating the MDIO bus,
\nleaving bp->mii_bus as NULL.<\/p>\n
Two cleanup paths then dereference this NULL bus:<\/p>\n
1. On driver unbind, macb_remove() unconditionally calls
\n mdiobus_unregister(bp->mii_bus), which oopses:<\/p>\n
Unable to handle kernel NULL pointer dereference at virtual address 00000000000004a8
\n pc : mdiobus_unregister+0x14\/0xa4
\n lr : macb_remove+0x38\/0xa4
\n Call trace:
\n mdiobus_unregister+0x14\/0xa4 (P)
\n macb_remove+0x38\/0xa4
\n platform_remove+0x20\/0x30
\n device_release_driver_internal+0x1c8\/0x224
\n unbind_store+0xb4\/0xbc<\/p>\n
2. On the probe error path in macb_probe(), reached when
\n macb_mii_init() has succeeded but a subsequent step fails, the
\n err_out_unregister_mdio label runs the same unconditional cleanup.<\/p>\n
mdiobus_unregister() and mdiobus_free() do not guard against a NULL
\nbus, so guard the calls in both macb_remove() and the probe error
\npath.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
net: macb: fix NULL pointer dereference on unbind with fixed-link<\/p>\n
When the device tree describes a fixed-link and has no “mdio” ch<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-29163","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/29163","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}