NetSight
IP …
medium5.5

CVE-2024-26855

In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_b…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently in nla_for_each_nested(). To address this issue, add a check to ensure that br_spec is not NULL before proceeding with the nested attribute iteration.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.20 before 5.4.272
from 5.5 before 5.10.213
from 5.11 before 5.15.152
from 5.16 before 6.1.82
from 6.2 before 6.6.22
from 6.7 before 6.7.10
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References