CVE-2024-42224

Summary

CVE-2024-42224: A vulnerability has been identified and addressed in the Linux kernel's net: dsa: mv88e6xxx driver. The issue arose due to an inadequate check in the function mv88e6xxx_default_mdio_bus(). Instead of using the correct function list_first_entry_or_null() to confirm if the list chip->mdios is empty, the code mistakenly assumed that list_first_entry() would return a non-NULL value for non-empty lists. This flaw could potentially lead to unintended behavior or crashes if an empty list is encountered. The flaw was discovered by Smatch and has been resolved in the latest kernel update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.