CVE-2024-35796

net: ll_temac: platform_get_resource replaced by wrong function

State: Published
Severity: 5.5 Medium
Published: May 17, 2024
Updated: May 23, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ll_temac: platform_get_resource replaced by wrong function

The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name.

This eventually ends up in platform_get_resource_byname in the call stack, where it causes a null pointer in strcmp.

if (type == resource_type(r) && !strcmp(r->name, name))

It should have been replaced with devm_platform_ioremap_resource.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 6d9395ba7f85bdb7af0b93272e537484ecbeff48Affected bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 553d294db94b5f139378022df480a9fb6c3ae39eAffected bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 46efbdbc95a30951c2579caf97b6df2ee2b3bef3Affected bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 476eed5f1c22034774902a980aa48dc4662cb39aAffected bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 7e9edb569fd9f688d887e36db8170f6e22bafbc8Affected bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 92c0c29f667870f17c0b764544bdf22ce0e886a1Affected bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 3a38a829c8bc27d78552c28e582eb1d885d07d11Affected 77c8cfdf808410be84be56aff7e0e186b8c5a879Affected 5.8.2 to before 5.9Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.215 through 5.10.Not affected 5.15.154 through 5.15.Not affected 6.1.84 through 6.1.Not affected 6.6.24 through 6.6.Not affected 6.7.12 through 6.7.Not affected 6.8.3 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 6d9395ba7f85bdb7af0b93272e537484ecbeff48Affected
bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 553d294db94b5f139378022df480a9fb6c3ae39eAffected
bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 46efbdbc95a30951c2579caf97b6df2ee2b3bef3Affected
bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 476eed5f1c22034774902a980aa48dc4662cb39aAffected
bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 7e9edb569fd9f688d887e36db8170f6e22bafbc8Affected
bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 92c0c29f667870f17c0b764544bdf22ce0e886a1Affected
bd69058f50d5ffa659423bcfa6fe6280ce9c760a to before 3a38a829c8bc27d78552c28e582eb1d885d07d11Affected
77c8cfdf808410be84be56aff7e0e186b8c5a879Affected
5.8.2 to before 5.9Affected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.215 through 5.10.*Not affected
5.15.154 through 5.15.*Not affected
6.1.84 through 6.1.*Not affected
6.6.24 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8.3 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.