CVE-2023-54156

CVE-2023-54156 affects the Linux kernel sfc/efx_net_stats path where ethtool self-tests can trigger a stats read during NIC reset. If Stats are read while NIC data (mc_stats) is NULL due to fini, there is a NULL dereference in efx_nic_update_stats, potentially crashing the kernel. The advisory's ...

DEBIAN-CVE-2024-50094

In the Linux kernel, the following vulnerability has been resolved: sfc: Don't invoke xdpdoflush from netpoll. Yury reported a crash in the sfc driver originated from netpollsendudp. The netconsole sends a message and then netpoll invokes the driver's NAPI function with a budget of zero. It is...