High · published May 1, 2025
In the Linux kernel, the following vulnerability has been resolved:
net: libwx: handle page_pool_dev_alloc_pages error
page_pool_dev_alloc_pages could return NULL. There was a WARN_ON(!page)
but it would still proceed to use the NULL pointer and then crash.
This is similar to commit 001ba0902046
("net: fec: handle page_pool_dev_alloc_pages error").
This is found by our static analysis tool KNighter.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 6.3, < 6.6.88 | 6.6.88 |
| linux/linux_kernel | ≥ 6.7, < 6.12.24 | 6.12.24 |
| linux/linux_kernel | ≥ 6.13, < 6.13.12 | 6.13.12 |
| linux/linux_kernel | ≥ 6.14, < 6.14.3 | 6.14.3 |
| linux/linux_kernel | all versions | — |