CVE-2024-35945

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: phy: phy_device: Prevent nullptr exceptions on ISR

If phydev->irq is set unconditionally, check for valid interrupt handler or fall back to polling mode to prevent nullptr exceptions in interrupt service routine.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux49644e68f472c6480e015253fa4d7448c6cfa2aa < 7a71f61ebf95cedd3f245db6da397822971d8db5affected
LinuxLinux49644e68f472c6480e015253fa4d7448c6cfa2aa < 3419ee39e3d3162ab2ec9942bb537613ed5b6311affected
LinuxLinux49644e68f472c6480e015253fa4d7448c6cfa2aa < 61c81872815f46006982bb80460c0c80a949b35baffected
LinuxLinux5.3affected
LinuxLinux0 < 5.3unaffected
LinuxLinux6.6.27 <= 6.6.*unaffected
LinuxLinux6.8.6 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References