CVE-2022-50651

In the Linux kernel, the following vulnerability has been resolved:

ethtool: eeprom: fix null-deref on genl_info in dump

The similar fix as commit 46cdedf2a0fa ("ethtool: pse-pd: fix null-deref on genl_info in dump") is also needed for ethtool eeprom.

The eeprom_prepare_data() function in net/ethtool/eeprom.c could dereference a NULL genl_info pointer when handling a dump request, leading to a kernel NULL pointer dereference and system crash. A local user with access to the ethtool netlink API could trigger this by issuing an EEPROM dump request without a valid info structure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.