Threats tagged 'ghsa-f575-f7mf-jmpq'

CVE-2024-50145 addresses a vulnerability in the Linux kernel's octeon_ep driver where failure to handle SKB (socket buffer) allocation failures in the __octep_oq_process_rx() function could lead to a NULL pointer dereference. The issue occurs because build_skb() can return NULL on memory allocation failure, and without proper handling, this results in improper processing during NAPI polling. The fix involves adding handling for SKB allocation failures by skipping packet processing and cleaning up fragment buffers, while incrementing an allocation failure counter for driver statistics.