Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-38593
HistoryJun 19, 2024 - 1:45 p.m.

CVE-2024-38593 net: micrel: Fix receiving the timestamp in the frame for lan8841

2024-06-1913:45:44
Linux
github.com
4
linux kernel
vulnerability
timestamping.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: micrel: Fix receiving the timestamp in the frame for lan8841

The blamed commit started to use the ptp workqueue to get the second
part of the timestamp. And when the port was set down, then this
workqueue is stopped. But if the config option NETWORK_PHY_TIMESTAMPING
is not enabled, then the ptp_clock is not initialized so then it would
crash when it would try to access the delayed work.
So then basically by setting up and then down the port, it would crash.
The fix consists in checking if the ptp_clock is initialized and only
then cancel the delayed work.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "cc7554954848",
        "lessThan": "3ddf170e4a60",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "cc7554954848",
        "lessThan": "3fd4282d5f25",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "cc7554954848",
        "lessThan": "64a47cf634ae",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "cc7554954848",
        "lessThan": "aea27a92a41d",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/phy/micrel.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.5"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.5",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.6.33",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.8.12",
        "versionType": "custom",
        "lessThanOrEqual": "6.8.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.3",
        "versionType": "custom",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/phy/micrel.c"
    ],
    "defaultStatus": "affected"
  }
]

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial