We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-46856

net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices



Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer dereference in the recently introduced/changed functions dp8382x_config_init() and dp83822_set_wol(). Add the dp8382x_probe() function, so all PHY models will have a valid private data pointer to fix this issue and also prevent similar issues in the future.

Reserved 2024-09-11 | Published 2024-09-27 | Updated 2024-11-05 | Assigner Linux

Product status

Default status
unaffected

9ef9ecfa9e9f before 67b61e2f4c9c
affected

9ef9ecfa9e9f before 3f62ea572b3e
affected

Default status
affected

6.10
affected

Any version before 6.10
unaffected

6.10.11
unaffected

6.11
unaffected

References

git.kernel.org/...c/67b61e2f4c9c5df97a9a2ef7a1fe35eae00531f4

git.kernel.org/...c/3f62ea572b3e8e3f10c39a9cb4f04ca9ae5f2952

cve.org (CVE-2024-46856)

nvd.nist.gov (CVE-2024-46856)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-46856

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.