Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Enguerrand De Ribaucourt

Researcher fromSavoir-faire Linux
#45563of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2024-8296
5.5
2024-03-08
Linux · Linux Kernel · CVE-2024-27047
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the phy get internal delay function in the Linux kernel, which can try to access an empty array when the driver calls phy get internal delay without defining delay values and rx-internal-delay-ps or tx-internal-delay-ps is defined to 0 in the device-tree. This can lead to a kernel NULL pointer dereference. The problem occurs when the test for delay is not properly handled, allowing for a potential crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.