PT-2024-7698 · Linux+5 · Linux Kernel+5

Devyn Liu

·

Published

2024-01-23

·

Updated

2025-02-27

·

CVE-2024-26776

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a null pointer dereference in the hisi sfc v3xx isr() function, which can cause a denial of service. An empty interrupt can lead to this error, resulting in a kernel null pointer dereference at a virtual address. The call trace includes functions such as complete(), hisi sfc v3xx isr(), handle irq event percpu(), and handle irq event(). Exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-09155
CVE-2024-26776
DLA-3842-1
DSA-5658-1
DSA-5681-1
OESA-2024-1622
OESA-2024-1647
OESA-2024-1648
OESA-2024-1649
OPENSUSE-SU-2024_1490-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1490-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
USN-6820-1
USN-6820-2
USN-6821-1
USN-6821-2
USN-6821-3
USN-6821-4
USN-6828-1
USN-6871-1
USN-6892-1
USN-6919-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu