Lucene search

K
cve416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2024-35891
HistoryMay 19, 2024 - 9:15 a.m.

CVE-2024-35891

2024-05-1909:15:10
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
26
linux kernel
net
phy
micrel
null pointer vulnerability
fix
abnormal packet type
corrupted packet
svace
linux verification center
nvd

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

In the Linux kernel, the following vulnerability has been resolved:

net: phy: micrel: Fix potential null pointer dereference

In lan8814_get_sig_rx() and lan8814_get_sig_tx() ptp_parse_header() may
return NULL as ptp_header due to abnormal packet type or corrupted packet.
Fix this bug by adding ptp_header check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

Related for CVE-2024-35891