Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-26855

net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.272, 5.10.213, 5.15.152, 6.1.82, 6.6.22, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently in nla_for_each_nested(). To address this issue, add a check to ensure that br_spec is not NULL before proceeding with the nested attribute iteration.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in d9fefc51133107e59d192d773be86c1150cfeebb; From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in 37fe99016b12d32100ce670216816dba6c48b309; From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in 8d95465d9a424200485792858c5b3be54658ce19; From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in afdd29726a6de4ba27cd15590661424c888dc596; From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in 1a770927dc1d642b22417c3e668c871689fc58b3; From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in 0e296067ae0d74a10b4933601f9aa9f0ec8f157f; From b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 · fixed in 06e456a05d669ca30b224b8ed962421770c1496c

  • Linux Linux

    4.20

  • KernelLinux

    From 4.20.0 · fixed in 5.4.272; From 5.5.0 · fixed in 5.10.213; From 5.11.0 · fixed in 5.15.152; From 5.16.0 · fixed in 6.1.82; From 6.2.0 · fixed in 6.6.22; From 6.7.0 · fixed in 6.7.10

References 7

git.kernel.org