CVE-2024-35945: net: phy: phy_device: Prevent nullptr exceptions on ISR
In the Linux kernel, the following vulnerability has been resolved:
net: phy: phydevice: Prevent nullptr exceptions on ISR
If phydev->irq is set unconditionally, check for valid interrupt handler or fall back to polling mode to prevent nullptr exceptions in interrupt service routine.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35945?
CVE-2024-35945 has a medium severity rating due to its potential to cause a null pointer dereference in interrupt service routines.
How do I fix CVE-2024-35945?
To fix CVE-2024-35945, upgrade to the recommended kernel versions such as 6.12.10-1 or 6.12.11-1.
Which Linux kernel versions are affected by CVE-2024-35945?
CVE-2024-35945 affects Linux kernel versions prior to 6.6.27, along with specific variants ranging from 5.10.223-1 to 6.1.123-1.
Is there a workaround for CVE-2024-35945?
A potential workaround for CVE-2024-35945 is to switch to polling mode if a valid interrupt handler cannot be established.
Who is impacted by CVE-2024-35945?
Users and administrators running vulnerable versions of the Linux kernel on their systems are impacted by CVE-2024-35945.