Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe() function is only used for the DP83822 PHY, leaving the private data pointer uninitialized for the smaller DP83825/26 models. While all uses of the private data structure are hidden in 82822 specific callbacks, configuring the interrupt is shared across all models. This causes a NULL pointer dereference on the smaller PHYs as it accesses the private data unchecked. Verifying the pointer avoids that.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5dc39fd5ef35bc6919759fa99246581b1adc6b82 to < 362a2f5531dc0e5b0b5b3e3a541000dbffa75461affected5dc39fd5ef35bc6919759fa99246581b1adc6b82 to < 2cd1e9c013ec56421c58921b1ddf1d2d53bd47faaffected5dc39fd5ef35bc6919759fa99246581b1adc6b82 to < 78901b10522cdf6badf24acf65a892637596bcccaffected5dc39fd5ef35bc6919759fa99246581b1adc6b82 to < 422ae7d9c7221e8d4c8526d0f54106307d69d2dcaffected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.10.168 to ≤ 5.10.*unaffected5.15.93 to ≤ 5.15.*unaffected6.1.11 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected