CVE-2024-46856

Summary

CVE-2024-46856 is a vulnerability affecting the Linux kernel net driver for the dp83822 and dp83826 PHY models. The issue arises due to the uninitialized private data pointer in the dp83825 models, leading to a NULL pointer dereference. This vulnerability can be exploited in the recently introduced functions dp8382x_config_init() and dp83822_set_wol(). To mitigate this issue, a new dp8382x_probe() function has been added to ensure all PHY models have a valid private data pointer. This change not only addresses the current vulnerability but also prevents similar issues in the future.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.