PT-2026-61437 · Linux · Linux
CVE-2026-64120
·
Publicado
2026-07-19
·
Atualizado
2026-07-19
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: fix NULL pointer dereference in phy reply size
In phy prepare data(), several strings such as 'name', 'drvname',
'upstream sfp name', and 'downstream sfp name' are allocated using
kstrdup(). However, these allocations were not checked for failure.
If kstrdup() fails for 'name', it returns NULL while the function
continues. This leads to a kernel NULL pointer dereference and panic
later in phy reply size() when it unconditionally calls strlen() on
the NULL pointer.
While other strings like 'upstream sfp name' might be checked before
access in certain code paths, failing to handle these allocations
consistently can lead to incomplete data reporting or hidden bugs.
Fix this by adding proper NULL checks for all kstrdup() calls in
phy prepare data() and implement a centralized error handling path
using goto labels to ensure all previously allocated resources are
freed on failure.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux