Linux Kernel igb Driver NULL Pointer Dereference Vulnerability in Ethtool Loopback Test

A NULL pointer dereference vulnerability has been identified in the Linux kernel's igb driver, specifically during the ethtool loopback test. This issue arises because the test ring is not associated with a q_vector, as interrupts are usually not applied to test rings. The vulnerability was introduced when the napi_id assignment was removed from the XDP (eXpress Data Path) receive queue registration function, creating an unnecessary requirement to pass a napi_id. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Remediation

The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version.