PT-2026-61437 · Linux · Linux
CVE-2026-64120
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: fix NULL pointer dereference in phy reply size
In phy prepare data(), several strings such as 'name', 'drvname',
'upstream sfp name', and 'downstream sfp name' are allocated using
kstrdup(). However, these allocations were not checked for failure.
If kstrdup() fails for 'name', it returns NULL while the function
continues. This leads to a kernel NULL pointer dereference and panic
later in phy reply size() when it unconditionally calls strlen() on
the NULL pointer.
While other strings like 'upstream sfp name' might be checked before
access in certain code paths, failing to handle these allocations
consistently can lead to incomplete data reporting or hidden bugs.
Fix this by adding proper NULL checks for all kstrdup() calls in
phy prepare data() and implement a centralized error handling path
using goto labels to ensure all previously allocated resources are
freed on failure.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux