Linux Kernel Broadcom BCM4908 Ethernet Driver NULL Dereference Vulnerability

A vulnerability in the Broadcom BCM4908 Ethernet driver of the Linux kernel has been addressed. The issue involved the transmission statistics not being updated after the actual data transmission, which could lead to a race condition and a NULL pointer dereference. The function 'bcm4908_enet_start_xmit()' might attempt to access a socket buffer after it has been freed in 'bcm4908_enet_poll_tx()'. This vulnerability affects the Linux kernel in the stable group.

Impact

Exploitation of this vulnerability could lead to a NULL pointer dereference, causing a crash or undefined behavior in the system.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.