Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-26855

net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()

Description

In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently in nla_for_each_nested(). To address this issue, add a check to ensure that br_spec is not NULL before proceeding with the nested attribute iteration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < d9fefc51133107e59d192d773be86c1150cfeebbaffected
  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < 37fe99016b12d32100ce670216816dba6c48b309affected
  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < 8d95465d9a424200485792858c5b3be54658ce19affected
  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < afdd29726a6de4ba27cd15590661424c888dc596affected
  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < 1a770927dc1d642b22417c3e668c871689fc58b3affected
  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < 0e296067ae0d74a10b4933601f9aa9f0ec8f157faffected
  • b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 to < 06e456a05d669ca30b224b8ed962421770c1496caffected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.4.272 to ≤ 5.4.*unaffected
  • 5.10.213 to ≤ 5.10.*unaffected
  • 5.15.152 to ≤ 5.15.*unaffected
  • 6.1.82 to ≤ 6.1.*unaffected
  • 6.6.22 to ≤ 6.6.*unaffected
  • 6.7.10 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References