Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-35891

net: phy: micrel: Fix potential null pointer dereference

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Fix potential null pointer dereference In lan8814_get_sig_rx() and lan8814_get_sig_tx() ptp_parse_header() may return NULL as ptp_header due to abnormal packet type or corrupted packet. Fix this bug by adding ptp_header check. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ece19502834d84ece2e056db28257ca2aa6e4d48 to < 10608161696c2768f53426642f78a42bcaaa53e8affected
  • ece19502834d84ece2e056db28257ca2aa6e4d48 to < 95c1016a2d92c4c28a9d1b6d09859c00b19c0ea4affected
  • ece19502834d84ece2e056db28257ca2aa6e4d48 to < 49767b0df276f12e3e7184601e09ee7430e252dcaffected
  • ece19502834d84ece2e056db28257ca2aa6e4d48 to < 96c155943a703f0655c0c4cab540f67055960e91affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.85 to ≤ 6.1.*unaffected
  • 6.6.26 to ≤ 6.6.*unaffected
  • 6.8.5 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References