CVE-2024-35891

net: phy: micrel: Fix potential null pointer dereference

State: Published
Severity: 7.5 High
Published: May 19, 2024
Updated: Aug 5, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: phy: micrel: Fix potential null pointer dereference

In lan8814_get_sig_rx() and lan8814_get_sig_tx() ptp_parse_header() may return NULL as ptp_header due to abnormal packet type or corrupted packet. Fix this bug by adding ptp_header check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ece19502834d84ece2e056db28257ca2aa6e4d48 to before 10608161696c2768f53426642f78a42bcaaa53e8Affected ece19502834d84ece2e056db28257ca2aa6e4d48 to before 95c1016a2d92c4c28a9d1b6d09859c00b19c0ea4Affected ece19502834d84ece2e056db28257ca2aa6e4d48 to before 49767b0df276f12e3e7184601e09ee7430e252dcAffected ece19502834d84ece2e056db28257ca2aa6e4d48 to before 96c155943a703f0655c0c4cab540f67055960e91Affected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.85 through 6.1.Not affected 6.6.26 through 6.6.Not affected 6.8.5 through 6.8.*Not affected 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.