Linux Kernel OcteonTX2 MAC Block Access Vulnerability Leading to Kernel Panic

A vulnerability in the Linux kernel's handling of firmware data for OcteonTX2 boards has been addressed. The issue arose because the firmware was not properly checked before the kernel accessed shared data, particularly on boards without an active MAC block. This oversight could lead to kernel panics, as evidenced by an internal error message indicating a serious fault in the kernel's operation. The problem was traced to the OcteonTX2 AF driver, specifically in the RVU CGX and SDP components.

Impact

The vulnerability could cause a kernel panic, disrupting system operations and potentially leading to a denial of service.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux kernel stable tree.