CVE-2024-46856
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-46856
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46856.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-46856
- Downstream
- Published
- 2024-09-27T12:42:47.908Z
- Modified
- 2025-12-05T06:42:11.104852Z
- Summary
- net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices
The probe() function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer dereference in the recently introduced/changed functions dp8382xconfiginit() and dp83822setwol().
Add the dp8382x_probe() function, so all PHY models will have a valid private data pointer to fix this issue and also prevent similar issues in the future.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46856.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/3f62ea572b3e8e3f10c39a9cb4f04ca9ae5f2952
- https://git.kernel.org/stable/c/67b61e2f4c9c5df97a9a2ef7a1fe35eae00531f4
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46856.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-46856