Executive Summary

Informations
Name CVE-2024-26942 First vendor Publication 2024-05-01
Vendor Cve Last vendor Modification 2024-07-03

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

net: phy: qcom: at803x: fix kernel panic with at8031_probe

On reworking and splitting the at803x driver, in splitting function of at803x PHYs it was added a NULL dereference bug where priv is referenced before it's actually allocated and then is tried to write to for the is_1000basex and is_fiber variables in the case of at8031, writing on the wrong address.

Fix this by correctly setting priv local variable only after at803x_probe is called and actually allocates priv in the phydev struct.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26942

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3606

Sources (Detail)

https://git.kernel.org/stable/c/6a4aee277740d04ac0fd54cfa17cc28261932ddc
https://git.kernel.org/stable/c/a8a296ad9957b845b89bcf48be1cf8c74875ecc3
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
Date Informations
2024-11-21 21:24:05
  • Multiple Updates
2024-11-20 02:57:16
  • Multiple Updates
2024-11-14 02:57:35
  • Multiple Updates
2024-11-09 02:57:36
  • Multiple Updates
2024-10-26 02:55:00
  • Multiple Updates
2024-10-25 02:56:55
  • Multiple Updates
2024-10-23 02:56:09
  • Multiple Updates
2024-10-03 02:51:31
  • Multiple Updates
2024-10-02 02:49:55
  • Multiple Updates
2024-09-15 02:47:49
  • Multiple Updates
2024-09-12 02:47:22
  • Multiple Updates
2024-09-06 02:45:38
  • Multiple Updates
2024-09-04 02:48:53
  • Multiple Updates
2024-08-22 02:46:57
  • Multiple Updates
2024-08-02 13:56:03
  • Multiple Updates
2024-08-02 01:35:24
  • Multiple Updates
2024-07-03 09:27:38
  • Multiple Updates
2024-05-24 00:28:25
  • Multiple Updates
2024-05-02 02:47:12
  • Multiple Updates
2024-05-02 02:47:05
  • Multiple Updates
2024-05-01 17:27:28
  • Multiple Updates
2024-05-01 13:27:28
  • First insertion