CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: fix the error condition in ethtoolgetphystatsethtool()
Clang static checker (scan-build) warning: net/ethtool/ioctl.c:line 2233, column 2 Called function pointer is null (null dereference).
Return '-EOPNOTSUPP' when 'ops->getethtoolphystats' is NULL to fix this typo error.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40928?
CVE-2024-40928 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-40928?
To fix CVE-2024-40928, you should upgrade the kernel to the latest available version, specifically to 6.6.35, 6.9.6, or 6.10 as provided by Red Hat or the corresponding updates from Debian.
Which versions of the Linux kernel are affected by CVE-2024-40928?
CVE-2024-40928 affects Linux kernel versions prior to 6.6.35 and 6.9.6, as well as 6.10 versions prior to its stable release.
What problem does CVE-2024-40928 address?
CVE-2024-40928 addresses a null dereference in the ethtool_get_phy_stats_ethtool() function which could potentially lead to a system crash.
Who is impacted by CVE-2024-40928?
Users running vulnerable versions of the Linux kernel on their systems may be impacted by CVE-2024-40928, specifically those using affected Red Hat or Debian distributions.