Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43836
HistoryAug 17, 2024 - 9:21 a.m.

CVE-2024-43836 net: ethtool: pse-pd: Fix possible null-deref

2024-08-1709:21:53
Linux
github.com
1
linux kernel
netlink attributes
null-deref
vulnerability
pse
podl
ethnl_set_pse_validate

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: ethtool: pse-pd: Fix possible null-deref

Fix a possible null dereference when a PSE supports both c33 and PoDL, but
only one of the netlink attributes is specified. The c33 or PoDL PSE
capabilities are already validated in the ethnl_set_pse_validate() call.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-43836