CVE-2025-38123: net: wwan: t7xx: Fix napi rx poll issue
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: Fix napi rx poll issue
When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of processing skb in polling, an invalid netdev is still being used, which causes a panic.
BUG: kernel NULL pointer dereference, address: 00000000000000f1 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:devgroreceive+0x3a/0x620 [...] Call Trace: <IRQ> ? diebody+0x68/0xb0 ? pagefaultoops+0x379/0x3e0 ? excpagefault+0x4f/0xa0 ? asmexcpagefault+0x22/0x30 ? pfxt7xxccmnirecvskb+0x10/0x10 [mtkt7xx (HASH:1400 7)] ? devgroreceive+0x3a/0x620 napigroreceive+0xad/0x170 t7xxccmnirecvskb+0x48/0x70 [mtkt7xx (HASH:1400 7)] t7xxdpmaifnapirxpoll+0x590/0x800 [mtkt7xx (HASH:1400 7)] netrxaction+0x103/0x470 irqexitrcu+0x13a/0x310 sysvecapictimerinterrupt+0x56/0x90 </IRQ>
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38123?
CVE-2025-38123 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-38123?
To fix CVE-2025-38123, update your Linux kernel to the latest version that includes the patch addressing this vulnerability.
What components are affected by CVE-2025-38123?
CVE-2025-38123 affects the Linux kernel's net: wwan: t7xx component responsible for handling network device operations.
Can CVE-2025-38123 be exploited remotely?
Yes, CVE-2025-38123 has the potential for remote exploitation if an attacker manages to trigger the napi rx polling issue.
What specific issue does CVE-2025-38123 address?
CVE-2025-38123 addresses a napi rx polling issue in the Linux kernel that can occur when the netdev is released due to disconnect operations.