AZL-72676
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72676.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72676
- Upstream
- Published
- 2025-12-16T16:16:09Z
- Modified
- 2026-04-01T05:22:11.575389Z
- Summary
- CVE-2025-68302 affecting package kernel for versions less than 6.6.119.3-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
Currently, when skb is null, the driver prints an error and then dereferences skb on the next line.
To fix this, let's add a 'break' after the error message to switch to sxgberxrefill(), which is similar to the approach taken by the other drivers in this particular case, e.g. calxeda with xgmac_rx().
Found during a code review.
- References