[{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"25d2ba94005f","status":"affected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.8","status":"affected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.8.3","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.9","status":"unaffected"}]}]

{"timestamp":"2024-05-16T17:56:48.480091Z","id":"CVE-2024-26942","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/phy/qcom/at803x.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"25d2ba94005fac18fe68878cddff59a67e115554","lessThan":"a8a296ad9957b845b89bcf48be1cf8c74875ecc3","versionType":"git","status":"affected"},{"version":"25d2ba94005fac18fe68878cddff59a67e115554","lessThan":"6a4aee277740d04ac0fd54cfa17cc28261932ddc","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/phy/qcom/at803x.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.8","status":"affected"},{"version":"0","lessThan":"6.8","versionType":"semver","status":"unaffected"},{"version":"6.8.3","lessThanOrEqual":"6.8.*","versionType":"semver","status":"unaffected"},{"version":"6.9","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

https://git.kernel.org/stable/c/6a4aee277740d04ac0fd54cfa17cc28261932ddc

https://git.kernel.org/stable/c/a8a296ad9957b845b89bcf48be1cf8c74875ecc3

CISA-ADP AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA-ADP CWE-362

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST CWE-476

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (excluding) 6.8 up to (excluding) 6.8.3
     *cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*

https://git.kernel.org/stable/c/6a4aee277740d04ac0fd54cfa17cc28261932ddc No Types Assigned

https://git.kernel.org/stable/c/6a4aee277740d04ac0fd54cfa17cc28261932ddc Patch

https://git.kernel.org/stable/c/a8a296ad9957b845b89bcf48be1cf8c74875ecc3 No Types Assigned

https://git.kernel.org/stable/c/a8a296ad9957b845b89bcf48be1cf8c74875ecc3 Patch

In the Linux kernel, the following vulnerability has been resolved:

net: phy: qcom: at803x: fix kernel panic with at8031_probe

On reworking and splitting the at803x driver, in splitting function of
at803x PHYs it was added a NULL dereference bug where priv is referenced
before it's actually allocated and then is tried to write to for the
is_1000basex and is_fiber variables in the case of at8031, writing on
the wrong address.

Fix this by correctly setting priv local variable only after
at803x_probe is called and actually allocates priv in the phydev struct.

kernel.org https://git.kernel.org/stable/c/6a4aee277740d04ac0fd54cfa17cc28261932ddc [No types assigned]

kernel.org https://git.kernel.org/stable/c/a8a296ad9957b845b89bcf48be1cf8c74875ecc3 [No types assigned]