Lucene search

K
cvelistLinuxCVELIST:CVE-2024-38593
HistoryJun 19, 2024 - 1:45 p.m.

CVE-2024-38593 net: micrel: Fix receiving the timestamp in the frame for lan8841

2024-06-1913:45:44
Linux
www.cve.org
3
vulnerability
linux kernel
micrel
timestamping
fix
cve-2024-38593

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

net: micrel: Fix receiving the timestamp in the frame for lan8841

The blamed commit started to use the ptp workqueue to get the second
part of the timestamp. And when the port was set down, then this
workqueue is stopped. But if the config option NETWORK_PHY_TIMESTAMPING
is not enabled, then the ptp_clock is not initialized so then it would
crash when it would try to access the delayed work.
So then basically by setting up and then down the port, it would crash.
The fix consists in checking if the ptp_clock is initialized and only
then cancel the delayed work.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/phy/micrel.c"
    ],
    "versions": [
      {
        "version": "cc7554954848",
        "lessThan": "3ddf170e4a60",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cc7554954848",
        "lessThan": "3fd4282d5f25",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cc7554954848",
        "lessThan": "64a47cf634ae",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cc7554954848",
        "lessThan": "aea27a92a41d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/phy/micrel.c"
    ],
    "versions": [
      {
        "version": "6.5",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.5",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.12",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9.3",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

0.0004 Low

EPSS

Percentile

15.7%

Related for CVELIST:CVE-2024-38593