Linux Kernel LAN78XX NAPI Warning Resolution Vulnerability

Vulnerability

A vulnerability in the Linux kernel's handling of the LAN78XX USB Ethernet driver has been addressed. The issue arose because the 'netif_napi_del()' function was redundantly called during the USB device disconnection process, while NAPI (Network Active Polling Interface) was still enabled. This unnecessary call could trigger a warning in the 'netif_napi_del_locked()' function. The warning occurred because the NAPI deletion was not properly synchronized with the device disconnection, leading to a failed attempt to read certain register indices from the LAN78XX device. The redundant call has been removed, allowing the 'unregister_netdev()' function to manage the NAPI teardown automatically and safely.

Impact

The vulnerability could cause a warning to be logged during the disconnection of a USB device using the LAN78XX driver, indicating a potential issue with the NAPI handling.

Added: Jul 25, 2025, 2:10 PM
Updated: Jul 25, 2025, 6:40 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
5.3
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.