U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-26942

Change History

New CVE Received by NIST 5/01/2024 2:15:09 AM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

net: phy: qcom: at803x: fix kernel panic with at8031_probe

On reworking and splitting the at803x driver, in splitting function of
at803x PHYs it was added a NULL dereference bug where priv is referenced
before it's actually allocated and then is tried to write to for the
is_1000basex and is_fiber variables in the case of at8031, writing on
the wrong address.

Fix this by correctly setting priv local variable only after
at803x_probe is called and actually allocates priv in the phydev struct.
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/6a4aee277740d04ac0fd54cfa17cc28261932ddc [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/a8a296ad9957b845b89bcf48be1cf8c74875ecc3 [No types assigned]