CVE-2023-52780

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: mvneta: fix calls to page_pool_get_stats

Calling page_pool_get_stats in the mvneta driver without checks

leads to kernel crashes.

First the page pool is only available if the bm is not used.

The page pool is also not allocated when the port is stopped.

It can also be not allocated in case of errors.

The current implementation leads to the following crash calling

ethstats on a port that is down or when calling it at the wrong moment:

ble to handle kernel NULL pointer dereference at virtual address 00000070

[00000070] *pgd=00000000

Internal error: Oops: 5 [#1] SMP ARM

Hardware name: Marvell Armada 380/385 (Device Tree)

PC is at page_pool_get_stats+0x18/0x1cc

LR is at mvneta_ethtool_get_stats+0xa0/0xe0 [mvneta]

pc : [<c0b413cc>] lr : [<bf0a98d8>] psr: a0000013

sp : f1439d48 ip : f1439dc0 fp : 0000001d

r10: 00000100 r9 : c4816b80 r8 : f0d75150

r7 : bf0b400c r6 : c238f000 r5 : 00000000 r4 : f1439d68

r3

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References