CVE-2025-38123
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38123
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38123.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38123
- Downstream
- Related
- Published
- 2025-07-03T08:35:29Z
- Modified
- 2025-10-09T18:51:44.544357Z
- Summary
- net: wwan: t7xx: Fix napi rx poll issue
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: Fix napi rx poll issue
When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of processing skb in polling, an invalid netdev is still being used, which causes a panic.
BUG: kernel NULL pointer dereference, address: 00000000000000f1 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:devgroreceive+0x3a/0x620 [...] Call Trace: <IRQ> ? _diebody+0x68/0xb0 ? pagefaultoops+0x379/0x3e0 ? excpagefault+0x4f/0xa0 ? asmexcpagefault+0x22/0x30 ? _pfxt7xxccmnirecvskb+0x10/0x10 [mtkt7xx (HASH:1400 7)] ? devgroreceive+0x3a/0x620 napigroreceive+0xad/0x170 t7xxccmnirecvskb+0x48/0x70 [mtkt7xx (HASH:1400 7)] t7xxdpmaifnapirxpoll+0x590/0x800 [mtkt7xx (HASH:1400 7)] netrxaction+0x103/0x470 irqexitrcu+0x13a/0x310 sysvecapictimer_interrupt+0x56/0x90 </IRQ>
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/66542e9430c625f878a5b5dc0fe41e3458d614bf
- https://git.kernel.org/stable/c/905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1
- https://git.kernel.org/stable/c/cc89f457d9133a558d4e8ef26dc20843c2d12073
- https://git.kernel.org/stable/c/e2df04e69c3f10b412f54be036dd0ed3b14756cf
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5545b7b9f294de7f95ec6a7cb1de0db52296001cFixedcc89f457d9133a558d4e8ef26dc20843c2d12073
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5545b7b9f294de7f95ec6a7cb1de0db52296001cFixede2df04e69c3f10b412f54be036dd0ed3b14756cf
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5545b7b9f294de7f95ec6a7cb1de0db52296001cFixed66542e9430c625f878a5b5dc0fe41e3458d614bf
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5545b7b9f294de7f95ec6a7cb1de0db52296001cFixed905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1