In the Linux kernel, the following vulnerability has been resolved:
net: phy: qcom: at803x: fix kernel panic with at8031_probe
On reworking and splitting the at803x driver, in splitting function of at803x PHYs it was added a NULL dereference bug where priv is referenced before it's actually allocated and then is tried to write to for the is_1000basex and is_fiber variables in the case of at8031, writing on the wrong address.
Fix this by correctly setting priv local variable only after at803x_probe is called and actually allocates priv in the phydev struct.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-aws | Jul 1, 2024 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub