CVE-2024-50298

What it actually does

Null pointer dereference in enetc_pf_set_vf_mac when ndo_set_vf_mac is invoked before VF enablement, causing kernel crash on access to unallocated vf_state.

Why it matters to the business

Local denial of service that can crash systems using affected network hardware; low prevalence but requires prompt kernel updates on Ubuntu and similar distributions to avoid operational disruption.

How an attack unfolds

An attacker with local privileges issues ip link set commands targeting a VF MAC address on an enetc PF interface before the VF is enabled, triggering the null dereference path through rtnl_newlink and netlink handlers; listed threat actors in Linux kernel campaigns could chain this for local DoS during reconnaissance or privilege escalation attempts.

How to fix it

Update to fixed kernel versions that allocate vf_state during PF probe; for flashplugin-nonfree on Ubuntu 14.04 LTS apply version 11.2.202.554ubuntu0.14.04.1 or later where applicable in the ecosystem.

How to confirm the fix worked

Confirm kernel source contains vf_state allocation in probe path; test by attempting VF MAC configuration before enablement and verify no NULL dereference occurs; check dmesg for absence of the reported oops.

Typical attack path

1. Obtain local shell or user access on affected Linux system
2. Identify enetc PF interface and issue ndo_set_vf_mac ioctl or ip link set vf mac command before VF enablement
3. Trigger kernel NULL pointer dereference leading to panic or oops

How to detect it

Review kernel logs for NULL pointer dereference at enetc_pf_set_vf_mac; inspect netlink and rtnl_newlink call traces; correlate with commands setting VF MAC addresses on PF interfaces.

What your security team should do

• Prioritize kernel updates on all systems exposing enetc or similar network drivers
• Restrict unprivileged local users from network interface configuration via capabilities or SELinux policies until patched
• Monitor for kernel oops logs indicating enetc_pf_set_vf_mac involvement