CVE-2024-42282
published 2024-08-17CVE-2024-42282: In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling Move the…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
9.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
Move the freeing of the dummy net_device from mtk_free_dev() to
mtk_remove().
Previously, if alloc_netdev_dummy() failed in mtk_probe(),
eth->dummy_dev would be NULL. The error path would then call
mtk_free_dev(), which in turn called free_netdev() assuming dummy_dev
was allocated (but it was not), potentially causing a NULL pointer
dereference.
By moving free_netdev() to mtk_remove(), we ensure it's only called when
mtk_probe() has succeeded and dummy_dev is fully allocated. This
addresses a potential NULL pointer dereference detected by Smatch[1].
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.10.3-1 (forky) | linux 6.10.3-1 (forky) |
| fedorindutny | ip | 0 – 2.0.1 | — |
| linux | linux | — | — |
| linux | linux | >= b209bd6d0bffb8991aba568e2d9a892c86a1a43c < af6bd5c9901b13a26eaf4d57d97a813297791596 | af6bd5c9901b13a26eaf4d57d97a813297791596 |
| linux | linux | >= b209bd6d0bffb8991aba568e2d9a892c86a1a43c < 16f3a28cf5f876a7f3550d8f4c870a7b41bcfaef | 16f3a28cf5f876a7f3550d8f4c870a7b41bcfaef |
| linux | linux_kernel | >= 0 < 6.10.3-1 | 6.10.3-1 |
| linux | linux_kernel | >= 0 < 6.10.3-1 | 6.10.3-1 |
| linux | linux_kernel | >= 6.10 < 6.10.3 | 6.10.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
ghsa9.8CRITICAL
osv5.5MEDIUM
vendor_redhat9.8CRITICAL
vendor_debian5.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-42282: In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
osv·2024-08-17·CVSS 5.5
CVE-2024-42282 [MEDIUM] CVE-2024-42282: In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling Move the freeing of the dummy net_device from mtk_free_dev() to mtk_remove(). Previously, if alloc_netdev_dummy() failed in mtk_probe(), eth->dummy_dev would be NULL. The error path would then call mtk_free_dev(), which in turn called free_netdev() assuming dummy_dev was allocated (but it was not), potentially causing a NULL pointer dereference. By moving free_netdev() to mtk_remove(), we ensure it's only called when mtk_probe() has succeeded and dummy_dev is fully allocated. This addresses a potential NULL pointer dereference detected by Smatch[1].
GHSA
GHSA-mhhw-j772-75h5: In the Linux kernel, the following vulnerability has been resolved:
net: mediatek: Fix potential NULL pointer dereference in dummy net_device handlin
ghsa_unreviewed·2024-08-17
CVE-2024-42282 [MEDIUM] CWE-476 GHSA-mhhw-j772-75h5: In the Linux kernel, the following vulnerability has been resolved:
net: mediatek: Fix potential NULL pointer dereference in dummy net_device handlin
In the Linux kernel, the following vulnerability has been resolved:
net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
Move the freeing of the dummy net_device from mtk_free_dev() to
mtk_remove().
Previously, if alloc_netdev_dummy() failed in mtk_probe(),
eth->dummy_dev would be NULL. The error path would then call
mtk_free_dev(), which in turn called free_netdev() assuming dummy_dev
was allocated (but it was not), potentially causing a NULL pointer
dereference.
By moving free_netdev() to mtk_remove(), we ensure it's only called when
mtk_probe() has succeeded and dummy_dev is fully allocated. This
addresses a potential NULL pointer dereference detected by Smatch[1].
GHSA
ip SSRF improper categorization in isPublic
ghsa·2024-06-02·CVSS 9.8
CVE-2024-29415 [CRITICAL] CWE-918 ip SSRF improper categorization in isPublic
ip SSRF improper categorization in isPublic
The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282.
Red Hat
kernel: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
vendor_redhat·2024-08-17·CVSS 5.5
CVE-2024-42282 [MEDIUM] CWE-476 kernel: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
kernel: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
In the Linux kernel, the following vulnerability has been resolved:
net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling
Move the freeing of the dummy net_device from mtk_free_dev() to
mtk_remove().
Previously, if alloc_netdev_dummy() failed in mtk_probe(),
eth->dummy_dev would be NULL. The error path would then call
mtk_free_dev(), which in turn called free_netdev() assuming dummy_dev
was allocated (but it was not), potentially causing a NULL pointer
dereference.
By moving free_netdev() to mtk_remove(), we ensure it's only called when
mtk_probe() has succeeded and dummy_dev is fully allocated. This
addresses a potential NULL pointer dereference detected by Smatch[1].
Red Hat
node-ip: Incomplete fix for CVE-2023-42282
vendor_redhat·2024-02-20·CVSS 9.8
CVE-2024-29415 [CRITICAL] CWE-918 node-ip: Incomplete fix for CVE-2023-42282
node-ip: Incomplete fix for CVE-2023-42282
The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282.
A flaw was found in node-ip. The fix for CVE-2023-42282 in the ip package for Node.js was incomplete, and the issue may still be triggered using some IP addresses.
Statement: For CVE-2023-42282, npm does not utilize the bundled code, therefore Red Hat Enterprise Linux is not affected by this vulnerability.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria co
Debian
CVE-2024-42282: linux - In the Linux kernel, the following vulnerability has been resolved: net: mediat...
vendor_debian·2024·CVSS 5.5
CVE-2024-42282 [MEDIUM] CVE-2024-42282: linux - In the Linux kernel, the following vulnerability has been resolved: net: mediat...
In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling Move the freeing of the dummy net_device from mtk_free_dev() to mtk_remove(). Previously, if alloc_netdev_dummy() failed in mtk_probe(), eth->dummy_dev would be NULL. The error path would then call mtk_free_dev(), which in turn called free_netdev() assuming dummy_dev was allocated (but it was not), potentially causing a NULL pointer dereference. By moving free_netdev() to mtk_remove(), we ensure it's only called when mtk_probe() has succeeded and dummy_dev is fully allocated. This addresses a potential NULL pointer dereference detected by Smatch[1].
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.10.3-1)
sid: r
No detection rules found.
No public exploits indexed.
2024-08-17
Published