Linux Kernel CPSW2G Null Pointer Dereference Vulnerability in AM65 SoCs

A null pointer dereference vulnerability has been identified in the Linux kernel's handling of Ethernet transmission completion packets on Texas Instruments (TI) AM65 system-on-chips (SoCs) with a CPSW2G instance. This issue arises in the TX completion stage when the network device (ndev) is accessed without proper initialization, particularly if no TX packets have been processed. The uninitialized access leads to a kernel crash. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability causes a kernel crash due to a null pointer dereference.

Remediation

The vulnerability has been addressed in the Linux kernel stable tree. Users can download the patched version from the Linux kernel Git repository.