CVE-2024-42224
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-42224: A vulnerability has been identified and addressed in the Linux kernel's net: dsa: mv88e6xxx driver. The issue arose due to an inadequate check in the function mv88e6xxx_default_mdio_bus(). Instead of using the correct function list_first_entry_or_null() to confirm if the list chip->mdios is empty, the code mistakenly assumed that list_first_entry() would return a non-NULL value for non-empty lists. This flaw could potentially lead to unintended behavior or crashes if an empty list is encountered. The flaw was discovered by Smatch and has been resolved in the latest kernel update.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions