Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-50188

net: phy: dp83869: fix memory corruption when enabling fiber

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit number (10). This corrupts some other memory location -- in case of arm64 the priv pointer in the same structure. Since the advertising flags are updated from supported at the end of the function the incorrect line isn't needed at all and can be removed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a29de52ba2a156873505d8b8cef44e69925b8114 to < 21b5af7f0c99b3bf1fd02016e6708b613acbcaf4affected
  • a29de52ba2a156873505d8b8cef44e69925b8114 to < ad0d76b8ee5db063791cc2e7a30ffc9852ac37c4affected
  • a29de52ba2a156873505d8b8cef44e69925b8114 to < c1944b4253649fc6f2fb53e7d6302eb414d2182caffected
  • a29de52ba2a156873505d8b8cef44e69925b8114 to < 9ca634676ff66e1d616259e136f96f96b2a1759aaffected
  • a29de52ba2a156873505d8b8cef44e69925b8114 to < e3f2de32dae35bc7d173377dc97b5bc9fcd9fc84affected
  • a29de52ba2a156873505d8b8cef44e69925b8114 to < a842e443ca8184f2dc82ab307b43a8b38defd6a5affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.227 to ≤ 5.10.*unaffected
  • 5.15.168 to ≤ 5.15.*unaffected
  • 6.1.113 to ≤ 6.1.*unaffected
  • 6.6.57 to ≤ 6.6.*unaffected
  • 6.11.4 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References