PT-2024-6598 · Linux+6 · Linux Kernel+6
Published
2024-05-02
·
Updated
2025-09-29
·
CVE-2024-42224
CVSS v3.1
6.1
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the
mv88e6xxx default mdio bus() function in the Linux kernel, which incorrectly checks for an empty list. The function uses list first entry() to check if the list is empty, but this function is not designed to return NULL for empty lists. Instead, list first entry or null() should be used, which returns NULL if the list is empty. This incorrect check may allow an attacker to impact the integrity and availability of protected information. The issue was flagged by Smatch and compile tested only.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu