Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of the LAN78XX USB Ethernet driver has been addressed. The issue arose because the 'netif_napi_del()' function was redundantly called during the USB device disconnection process, while NAPI (Network Active Polling Interface) was still enabled. This unnecessary call could trigger a warning in the 'netif_napi_del_locked()' function. The warning occurred because the NAPI deletion was not properly synchronized with the device disconnection, leading to a failed attempt to read certain register indices from the LAN78XX device. The redundant call has been removed, allowing the 'unregister_netdev()' function to manage the NAPI teardown automatically and safely.
The vulnerability could cause a warning to be logged during the disconnection of a USB device using the LAN78XX driver, indicating a potential issue with the NAPI handling.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.