Null Pointer Dereference in Linux Kernel OcteonTX2 PF Driver

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the octeontx2-pf driver when CONFIG_DCB is enabled. It occurs because BPID assignment incorrectly assumes queue_to_pfc_map is always initialized, leading to invalid memory access for SDP VFs where it is not initialized. The fix adds a NULL check before dereferencing queue_to_pfc_map and simplifies logic by assigning a default BPID first.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the Linux kernel's octeontx2-pf driver when CONFIG_DCB is enabled. Detection requires checking kernel logs for invalid memory access errors related to BPID assignment or queue_to_pfc_map dereferencing. Use commands like dmesg | grep -i octeontx2 or journalctl -k | grep -i octeontx2 to search for relevant errors.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could cause system instability or crashes in Linux systems using the octeontx2-pf driver with CONFIG_DCB enabled. It may lead to invalid memory access, potentially causing denial-of-service conditions or unexpected behavior in affected virtual functions (VFs).

Useful 0 Not Useful 0

Mitigation Strategies

Apply the kernel patch that adds a NULL check for queue_to_pfc_map and ensures default BPID assignment. Update to a kernel version containing this fix. If CONFIG_DCB is not required, consider disabling it in the kernel configuration.

Useful 0 Not Useful 0