Description
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:5.14.0-362.18.1.el9_3 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:5.14.0-362.18.1.el9_3 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:5.14.0-284.48.1.el9_2 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:5.14.0-284.48.1.rt14.333.el9_2 to < *unaffected
Red Hat Red Hat Enterprise Linux 6
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
References
- https://access.redhat.com/errata/RHSA-2024:0439 ↗
- https://access.redhat.com/errata/RHSA-2024:0448 ↗
- https://access.redhat.com/errata/RHSA-2024:0461 ↗
- https://access.redhat.com/security/cve/CVE-2023-6679 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2253986 ↗
- https://lore.kernel.org/netdev/20231211083758.1082853-1-jiri@resnulli.us/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LBVHM4LGMFIHBN4UBESYRFMYX3WUICV5/ ↗