NetSight
IP …
medium5.5

CVE-2024-35796

In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_r…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name. This eventually ends up in platform_get_resource_byname in the call stack, where it causes a null pointer in strcmp. if (type == resource_type(r) && !strcmp(r->name, name)) It should have been replaced with devm_platform_ioremap_resource.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.8.2 before 5.10.215
from 5.11 before 5.15.154
from 5.16 before 6.1.84
from 6.2 before 6.6.24
from 6.7 before 6.7.12
from 6.8 before 6.8.3
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References