CVE-2024-35891

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: phy: micrel: Fix potential null pointer dereference

In lan8814_get_sig_rx() and lan8814_get_sig_tx() ptp_parse_header() may return NULL as ptp_header due to abnormal packet type or corrupted packet. Fix this bug by adding ptp_header check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxece19502834d84ece2e056db28257ca2aa6e4d48 < 10608161696c2768f53426642f78a42bcaaa53e8affected
LinuxLinuxece19502834d84ece2e056db28257ca2aa6e4d48 < 95c1016a2d92c4c28a9d1b6d09859c00b19c0ea4affected
LinuxLinuxece19502834d84ece2e056db28257ca2aa6e4d48 < 49767b0df276f12e3e7184601e09ee7430e252dcaffected
LinuxLinuxece19502834d84ece2e056db28257ca2aa6e4d48 < 96c155943a703f0655c0c4cab540f67055960e91affected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux6.1.85 <= 6.1.*unaffected
LinuxLinux6.6.26 <= 6.6.*unaffected
LinuxLinux6.8.5 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References