Riskcovery

CVE-2024-46856

net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices

State
Published
Severity
Not scored
Published
Sep 27, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices

The probe() function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer dereference in the recently introduced/changed functions dp8382x_config_init() and dp83822_set_wol().

Add the dp8382x_probe() function, so all PHY models will have a valid private data pointer to fix this issue and also prevent similar issues in the future.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9ef9ecfa9e9f0472adf5b254bda1e0788bc8eaad to before 67b61e2f4c9c5df97a9a2ef7a1fe35eae00531f4Affected
  • 9ef9ecfa9e9f0472adf5b254bda1e0788bc8eaad to before 3f62ea572b3e8e3f10c39a9cb4f04ca9ae5f2952Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.10.11 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.