CVE-2024-35891

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: phy: micrel: Fix potential null pointer dereference

In lan8814_get_sig_rx() and lan8814_get_sig_tx() ptp_parse_header() may return NULL as ptp_header due to abnormal packet type or corrupted packet. Fix this bug by adding ptp_header check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= ece19502834d84ece2e056db28257ca2aa6e4d48, < 10608161696c2768f53426642f78a42bcaaa53e8; >= ece19502834d84ece2e056db28257ca2aa6e4d48, < 95c1016a2d92c4c28a9d1b6d09859c00b19c0ea4; >= ece19502834d84ece2e056db28257ca2aa6e4d48, < 49767b0df276f12e3e7184601e09ee7430e252dc; >= ece19502834d84ece2e056db28257ca2aa6e4d48, < 96c155943a703f0655c0c4cab540f67055960e91
LinuxLinux5.18

References

Timeline

Published
May 19, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-358925.5In the Linux kernel, the following vulnerability has been resolved: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() qdisc_treeCVE-2024-358935.5In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: prevent kernel-infoleak syzbot found that tcf_sCVE-2024-358947.8In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent BPF accessing lowat from a subflow socket. Alexei reporCVE-2024-358955.5In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaCVE-2024-358967.1In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbCVE-2024-358975.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain CVE-2024-358987.0In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_gCVE-2024-358997.3In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net releasCVE-2024-35906.1The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in userCVE-2024-359005.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject new basechain after table flag update WheCVE-2024-359015.5In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix Rx DMA datasize and skb_over_panic mana_get_rxbuf_cfg()CVE-2024-359025.5In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp
CVE-2024-35891: Medium severity, CVSS 5.5 | Vulnix