In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: Fix napi rx poll issue
When driver handles the napi rx polling requests, the netdev might have been released by the dellink logic triggered by the disconnect operation on user plane. However, in the logic of processing skb in polling, an invalid netdev is still being used, which causes a panic.
BUG: kernel NULL pointer dereference, address: 00000000000000f1 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:devgroreceive+0x3a/0x620 [...] Call Trace: <IRQ> ? _diebody+0x68/0xb0 ? pagefaultoops+0x379/0x3e0 ? excpagefault+0x4f/0xa0 ? asmexcpagefault+0x22/0x30 ? _pfxt7xxccmnirecvskb+0x10/0x10 [mtkt7xx (HASH:1400 7)] ? devgroreceive+0x3a/0x620 napigroreceive+0xad/0x170 t7xxccmnirecvskb+0x48/0x70 [mtkt7xx (HASH:1400 7)] t7xxdpmaifnapirxpoll+0x590/0x800 [mtkt7xx (HASH:1400 7)] netrxaction+0x103/0x470 irqexitrcu+0x13a/0x310 sysvecapictimer_interrupt+0x56/0x90 </IRQ>
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"210438805552854385050853130300004551078",
"103976743609897382192746389067493128704",
"317845773163457083136467767087191682822",
"48489425390661432702370579095621033322",
"79972869721634707901712738173024256961",
"47515326305291822118056248569692936298",
"188567984092758785824581825323914930482",
"316608760952409012301541329184827951159",
"10485706886951711595270093336474104989",
"65201896409803477520633389858815093127",
"168565282238528871442143601895272854780",
"52350821583564501344939134004779658525",
"76945491663687331636500016423727715114",
"287092837137239808169835509499812275248",
"1803692754082686290694554074691698370",
"94574430488350079130367440694824216705",
"106577501392080230103392947587786709357",
"108437715998823933434296268072362932014",
"160381276028060747954933292956656753541",
"303941777058664911191613831951273205068",
"263668639042471048313092987762642439594",
"258842174225995392719652489212920353401",
"78916860928185101051881377410039585470"
]
},
"id": "CVE-2025-38123-0ce280d6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "163460915339513859026097684360761033507",
"length": 275.0
},
"id": "CVE-2025-38123-130b6033",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_full_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "252175519265338234387009282186401172111",
"length": 447.0
},
"id": "CVE-2025-38123-1652a4c9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_newlink"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"210438805552854385050853130300004551078",
"103976743609897382192746389067493128704",
"317845773163457083136467767087191682822",
"48489425390661432702370579095621033322",
"79972869721634707901712738173024256961",
"47515326305291822118056248569692936298",
"188567984092758785824581825323914930482",
"316608760952409012301541329184827951159",
"10485706886951711595270093336474104989",
"65201896409803477520633389858815093127",
"168565282238528871442143601895272854780",
"52350821583564501344939134004779658525",
"76945491663687331636500016423727715114",
"287092837137239808169835509499812275248",
"1803692754082686290694554074691698370",
"94574430488350079130367440694824216705",
"106577501392080230103392947587786709357",
"108437715998823933434296268072362932014",
"160381276028060747954933292956656753541",
"303941777058664911191613831951273205068",
"263668639042471048313092987762642439594",
"258842174225995392719652489212920353401",
"78916860928185101051881377410039585470"
]
},
"id": "CVE-2025-38123-1c7f43a8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "202310547312107812086708881116313381244",
"length": 296.0
},
"id": "CVE-2025-38123-230fd4aa",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_dellink"
},
"deprecated": false
},
{
"digest": {
"function_hash": "163460915339513859026097684360761033507",
"length": 275.0
},
"id": "CVE-2025-38123-23abe98a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_full_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "87614553272683041161198238351924598852",
"length": 404.0
},
"id": "CVE-2025-38123-2bc3b27e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_state_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "252175519265338234387009282186401172111",
"length": 447.0
},
"id": "CVE-2025-38123-339489b4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_newlink"
},
"deprecated": false
},
{
"digest": {
"function_hash": "87614553272683041161198238351924598852",
"length": 404.0
},
"id": "CVE-2025-38123-44953751",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_state_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "35775350255876667889311009129171415841",
"length": 266.0
},
"id": "CVE-2025-38123-53f411ec",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_irq_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "252175519265338234387009282186401172111",
"length": 447.0
},
"id": "CVE-2025-38123-54de39ed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_newlink"
},
"deprecated": false
},
{
"digest": {
"function_hash": "203819142966758022163470499304108259632",
"length": 585.0
},
"id": "CVE-2025-38123-66dad4d4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_recv_skb"
},
"deprecated": false
},
{
"digest": {
"function_hash": "87614553272683041161198238351924598852",
"length": 404.0
},
"id": "CVE-2025-38123-6ebeb84f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_state_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "203819142966758022163470499304108259632",
"length": 585.0
},
"id": "CVE-2025-38123-796e7da1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_recv_skb"
},
"deprecated": false
},
{
"digest": {
"function_hash": "163460915339513859026097684360761033507",
"length": 275.0
},
"id": "CVE-2025-38123-7aa854eb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_full_notify"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"210438805552854385050853130300004551078",
"103976743609897382192746389067493128704",
"317845773163457083136467767087191682822",
"48489425390661432702370579095621033322",
"79972869721634707901712738173024256961",
"47515326305291822118056248569692936298",
"188567984092758785824581825323914930482",
"316608760952409012301541329184827951159",
"10485706886951711595270093336474104989",
"65201896409803477520633389858815093127",
"168565282238528871442143601895272854780",
"52350821583564501344939134004779658525",
"76945491663687331636500016423727715114",
"287092837137239808169835509499812275248",
"1803692754082686290694554074691698370",
"94574430488350079130367440694824216705",
"106577501392080230103392947587786709357",
"108437715998823933434296268072362932014",
"160381276028060747954933292956656753541",
"303941777058664911191613831951273205068",
"263668639042471048313092987762642439594",
"258842174225995392719652489212920353401",
"78916860928185101051881377410039585470"
]
},
"id": "CVE-2025-38123-7ea106d3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "202310547312107812086708881116313381244",
"length": 296.0
},
"id": "CVE-2025-38123-915a949e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_dellink"
},
"deprecated": false
},
{
"digest": {
"function_hash": "163460915339513859026097684360761033507",
"length": 275.0
},
"id": "CVE-2025-38123-a333739e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_full_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "35775350255876667889311009129171415841",
"length": 266.0
},
"id": "CVE-2025-38123-b2dfcd5c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_irq_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "202310547312107812086708881116313381244",
"length": 296.0
},
"id": "CVE-2025-38123-c1e39e94",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_dellink"
},
"deprecated": false
},
{
"digest": {
"function_hash": "87614553272683041161198238351924598852",
"length": 404.0
},
"id": "CVE-2025-38123-c650666a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_state_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "252175519265338234387009282186401172111",
"length": 447.0
},
"id": "CVE-2025-38123-d4047b5c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2df04e69c3f10b412f54be036dd0ed3b14756cf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_newlink"
},
"deprecated": false
},
{
"digest": {
"function_hash": "35775350255876667889311009129171415841",
"length": 266.0
},
"id": "CVE-2025-38123-e0584937",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_irq_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "203819142966758022163470499304108259632",
"length": 585.0
},
"id": "CVE-2025-38123-e5a2a46c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_recv_skb"
},
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"210438805552854385050853130300004551078",
"103976743609897382192746389067493128704",
"317845773163457083136467767087191682822",
"48489425390661432702370579095621033322",
"79972869721634707901712738173024256961",
"47515326305291822118056248569692936298",
"188567984092758785824581825323914930482",
"316608760952409012301541329184827951159",
"10485706886951711595270093336474104989",
"65201896409803477520633389858815093127",
"168565282238528871442143601895272854780",
"52350821583564501344939134004779658525",
"76945491663687331636500016423727715114",
"287092837137239808169835509499812275248",
"1803692754082686290694554074691698370",
"94574430488350079130367440694824216705",
"106577501392080230103392947587786709357",
"108437715998823933434296268072362932014",
"160381276028060747954933292956656753541",
"303941777058664911191613831951273205068",
"263668639042471048313092987762642439594",
"258842174225995392719652489212920353401",
"78916860928185101051881377410039585470"
]
},
"id": "CVE-2025-38123-ee39a7ee",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66542e9430c625f878a5b5dc0fe41e3458d614bf",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c"
},
"deprecated": false
},
{
"digest": {
"function_hash": "35775350255876667889311009129171415841",
"length": 266.0
},
"id": "CVE-2025-38123-f1f70a90",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_queue_tx_irq_notify"
},
"deprecated": false
},
{
"digest": {
"function_hash": "203819142966758022163470499304108259632",
"length": 585.0
},
"id": "CVE-2025-38123-f340d48c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc89f457d9133a558d4e8ef26dc20843c2d12073",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_recv_skb"
},
"deprecated": false
},
{
"digest": {
"function_hash": "202310547312107812086708881116313381244",
"length": 296.0
},
"id": "CVE-2025-38123-fa488d25",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@905fe0845bb27e4eed2ca27ea06e6c4847f1b2b1",
"target": {
"file": "drivers/net/wwan/t7xx/t7xx_netdev.c",
"function": "t7xx_ccmni_wwan_dellink"
},
"deprecated": false
}
]