PT-2024-9792 · Linux+7 · Linux Kernel+7

Published 2024-05-14 · Updated 2025-09-29 · CVE-2024-38593

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the micrel component in the Linux kernel, specifically with receiving timestamps in frames for lan8841. When the port is set down, the ptp workqueue is stopped, but if the NETWORK PHY TIMESTAMPING config option is not enabled, the ptp clock is not initialized, leading to a crash when trying to access the delayed work. The fix involves checking if the ptp clock is initialized before canceling the delayed work.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Improper Initialization

Weakness Enumeration

CWE-908

CWE-665

Related Identifiers

ALSA-2024:4583

ALSA-2025_16880

BDU:2024-11566

CVE-2024-38593

INFSA-2024_4583

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-2076

RHSA-2024:4583

RHSA-2024_4583

RLSA-2024:4583

USN-6949-1

USN-6949-2

USN-6952-1

USN-6952-2

USN-6955-1

Affected Products

Almalinux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 476

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38593.json · Exploit
• https://ubuntu.com/security/CVE-2024-35984 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42109 · Security Note
• https://ubuntu.com/security/CVE-2024-36912 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38568 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36891 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41030 · Security Note
• https://ubuntu.com/security/CVE-2024-35988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39504 · Security Note
• https://ubuntu.com/security/CVE-2024-38574 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41047 · Security Note
• https://ubuntu.com/security/CVE-2024-35990 · Vendor Advisory