Riskcovery

CVE-2024-38584

net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()

State
Published
Severity
Not scored
Published
Jun 19, 2024
Updated
May 11, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()

In the prueth_probe() function, if one of the calls to emac_phy_connect() fails due to of_phy_connect() returning NULL, then the subsequent call to phy_attached_info() will dereference a NULL pointer.

Check the return code of emac_phy_connect and fail cleanly if there is an error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 128d5874c0822105ae9556d5435fb8562aff2e3b to before 5cd17f0e74cb99d209945b9f1f06d411aa667eb1Affected
  • 128d5874c0822105ae9556d5435fb8562aff2e3b to before b0a82ebabbdc4c307f781bb0e5cd617949a3900dAffected
  • 128d5874c0822105ae9556d5435fb8562aff2e3b to before 1e1d5bd7f4682e6925dd960aba2a1aa1d93da53aAffected
  • 128d5874c0822105ae9556d5435fb8562aff2e3b to before b31c7e78086127a7fcaa761e8d336ee855a920c6Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9.3 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.