CVE-2024-35796: net: ll_temac: platform_get_resource replaced by wrong function
In the Linux kernel, the following vulnerability has been resolved:
net: lltemac: platformgetresource replaced by wrong function
The function platformgetresource was replaced with devmplatformioremapresourcebyname and is called using 0 as name.
This eventually ends up in platformgetresourcebyname in the call stack, where it causes a null pointer in strcmp.
if (type == resourcetype(r) && !strcmp(r->name, name))
It should have been replaced with devmplatformioremapresource.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35796?
CVE-2024-35796 is classified as a security vulnerability in the Linux kernel that affects system stability and functionality.
How do I fix CVE-2024-35796?
To fix CVE-2024-35796, upgrade to a patched version of the Linux kernel, such as 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which software is affected by CVE-2024-35796?
CVE-2024-35796 affects specific versions of the Linux kernel in Debian distributions.
What does CVE-2024-35796 involve?
CVE-2024-35796 involves the replacement of the platform_get_resource function, which may lead to improper resource management.
Where can I find more details about CVE-2024-35796?
Details about CVE-2024-35796 can be found in various documentation sources, including the Linux kernel's change logs.