Home

CVE-2025-22103

Description

In the Linux kernel, the following vulnerability has been resolved:net: fix null pointer dereference in l3mdev_l3_rcvWhen delete l3s ipvlan: ip link del link eth0 ipvlan1 type ipvlan mode l3sThis may cause a null pointer dereference: Call trace: ip_rcv_finish+0x48/0xd0 ip_rcv+0x5c/0x100 __netif_receive_skb_one_core+0x64/0xb0 __netif_receive_skb+0x20/0x80 process_backlog+0xb4/0x204 napi_poll+0xe8/0x294 net_rx_action+0xd8/0x22c __do_softirq+0x12c/0x354This is because l3mdev_l3_rcv() visit dev->l3mdev_ops afteripvlan_l3s_unregister() assign the dev->l3mdev_ops to null. The processlike this: (CPU1) | (CPU2) l3mdev_l3_rcv() | check dev->priv_flags: | master = skb->dev; | | | ipvlan_l3s_unregister() | set dev->priv_flags | dev->l3mdev_ops = null; | visit master->l3mdev_ops |To avoid this by do not set dev->l3mdev_ops when unregister l3s ipvlan.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.081

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-azure-6.4.0-150600.8.40.1.x86_64.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-azure-debuginfo-6.4.0-150600.8.40.1.x86_64.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-azure-debugsource-6.4.0-150600.8.40.1.x86_64.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-azure-devel-6.4.0-150600.8.40.1.x86_64.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-azure-devel-debuginfo-6.4.0-150600.8.40.1.x86_64.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-devel-azure-6.4.0-150600.8.40.1.noarch.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-source-azure-6.4.0-150600.8.40.1.noarch.rpmLinux
SUSE-SU-2025:01965-1(Public Cloud Module 15 SP6) kernel-syms-azure-6.4.0-150600.8.40.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Legacy Module 15 SP6) reiserfs-kmp-default-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Legacy Module 15 SP6) reiserfs-kmp-default-debuginfo-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-default-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-default-base-6.4.0-150600.23.53.1.150600.12.24.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-default-debuginfo-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-default-debugsource-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-default-devel-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-default-devel-debuginfo-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-devel-6.4.0-150600.23.53.1.noarch.rpmLinux
SUSE-SU-2025:02000-1(Development Tools Module 15 SP6) kernel-docs-6.4.0-150600.23.53.1.noarch.rpmLinux
SUSE-SU-2025:02000-1(Basesystem Module 15 SP6) kernel-macros-6.4.0-150600.23.53.1.noarch.rpmLinux
SUSE-SU-2025:02000-1(Development Tools Module 15 SP6) kernel-obs-build-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Development Tools Module 15 SP6) kernel-obs-build-debugsource-6.4.0-150600.23.53.1.x86_64.rpmLinux
SUSE-SU-2025:02000-1(Development Tools Module 15 SP6) kernel-source-6.4.0-150600.23.53.1.noarch.rpmLinux
SUSE-SU-2025:02000-1(Development Tools Module 15 SP6) kernel-syms-6.4.0-150600.23.53.1.x86_64.rpmLinux
Linux kernel (USN-7594-1) linux-image-6.14.0-1004-realtime_6.14.0-1004.4_amd64.debLinux
Linux kernel (USN-7594-1) linux-image-6.14.0-1008-gcp_6.14.0-1008.8_amd64.debLinux
Linux kernel (USN-7594-1) linux-image-6.14.0-22-generic_6.14.0-22.22_amd64.debLinux
Linux kernel (USN-7594-1) linux-image-gcp_6.14.0-1008.8_amd64.debLinux
Linux kernel (USN-7594-1) linux-image-generic_6.14.0-22.22_amd64.debLinux
Linux kernel (USN-7594-1) linux-image-realtime_6.14.0-1004.4_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-7594-2) linux-image-6.14.0-1007-azure_6.14.0-1007.7_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-7594-2) linux-image-6.14.0-1007-azure-fde_6.14.0-1007.7_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-7594-2) linux-image-azure_6.14.0-1007.7_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-7594-2) linux-image-azure-fde_6.14.0-1007.7_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-7594-3) linux-image-6.14.0-1007-aws_6.14.0-1007.7_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-7594-3) linux-image-6.14.0-1007-oracle_6.14.0-1007.7_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-7594-3) linux-image-aws_6.14.0-1007.7+1_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-7594-3) linux-image-oracle_6.14.0-1007.7_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234