CVE-2024-46856
published 2024-09-27CVE-2024-46856: In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
7.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
The probe() function is only used for DP83822 and DP83826 PHY,
leaving the private data pointer uninitialized for the DP83825 models
which causes a NULL pointer dereference in the recently introduced/changed
functions dp8382x_config_init() and dp83822_set_wol().
Add the dp8382x_probe() function, so all PHY models will have a valid
private data pointer to fix this issue and also prevent similar issues
in the future.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.10.11-1 (forky) | linux 6.10.11-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 9ef9ecfa9e9f0472adf5b254bda1e0788bc8eaad < 67b61e2f4c9c5df97a9a2ef7a1fe35eae00531f4 | 67b61e2f4c9c5df97a9a2ef7a1fe35eae00531f4 |
| linux | linux | >= 9ef9ecfa9e9f0472adf5b254bda1e0788bc8eaad < 3f62ea572b3e8e3f10c39a9cb4f04ca9ae5f2952 | 3f62ea572b3e8e3f10c39a9cb4f04ca9ae5f2952 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.10.11-1 | 6.10.11-1 |
| linux | linux_kernel | >= 0 < 6.10.11-1 | 6.10.11-1 |
| linux | linux_kernel | >= 6.10 < 6.10.11 | 6.10.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
vendor_redhat·2024-09-27·CVSS 5.5
CVE-2024-46856 [MEDIUM] CWE-467 kernel: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
kernel: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
In the Linux kernel, the following vulnerability has been resolved:
net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
The probe() function is only used for DP83822 and DP83826 PHY,
leaving the private data pointer uninitialized for the DP83825 models
which causes a NULL pointer dereference in the recently introduced/changed
functions dp8382x_config_init() and dp83822_set_wol().
Add the dp8382x_probe() function, so all PHY models will have a valid
private data pointer to fix this issue and also prevent similar issues
in the future.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7)
Debian
CVE-2024-46856: linux - In the Linux kernel, the following vulnerability has been resolved: net: phy: d...
vendor_debian·2024·CVSS 5.5
CVE-2024-46856 [MEDIUM] CVE-2024-46856: linux - In the Linux kernel, the following vulnerability has been resolved: net: phy: d...
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer dereference in the recently introduced/changed functions dp8382x_config_init() and dp83822_set_wol(). Add the dp8382x_probe() function, so all PHY models will have a valid private data pointer to fix this issue and also prevent similar issues in the future.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.10.11-1)
sid: resolved (fixed in 6.10.11-1)
trixie: resolved (fixed in 6.10.11-1)
OSV
CVE-2024-46856: In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() fun
osv·2024-09-27·CVSS 5.5
CVE-2024-46856 [MEDIUM] CVE-2024-46856: In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() fun
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer dereference in the recently introduced/changed functions dp8382x_config_init() and dp83822_set_wol(). Add the dp8382x_probe() function, so all PHY models will have a valid private data pointer to fix this issue and also prevent similar issues in the future.
GHSA
GHSA-cv8x-m68j-4834: In the Linux kernel, the following vulnerability has been resolved:
net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
The probe() f
ghsa_unreviewed·2024-09-27
CVE-2024-46856 [MEDIUM] CWE-476 GHSA-cv8x-m68j-4834: In the Linux kernel, the following vulnerability has been resolved:
net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
The probe() f
In the Linux kernel, the following vulnerability has been resolved:
net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
The probe() function is only used for DP83822 and DP83826 PHY,
leaving the private data pointer uninitialized for the DP83825 models
which causes a NULL pointer dereference in the recently introduced/changed
functions dp8382x_config_init() and dp83822_set_wol().
Add the dp8382x_probe() function, so all PHY models will have a valid
private data pointer to fix this issue and also prevent similar issues
in the future.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-27
Published