CVE-2024-40928
net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Jul 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
Clang static checker (scan-build) warning:
net/ethtool/ioctl.c:line 2233, column 2
Called function pointer is null (null dereference).
Return '-EOPNOTSUPP' when 'ops->get_ethtool_phy_stats' is NULL to fix
this typo error.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/0dcc53abf58d572d34c5313de85f607cd33fc691https://git.kernel.org/stable/c/25504f7fe60058b2a9553a9e424fb7dd9683843ehttps://git.kernel.org/stable/c/6548d543a27449a1a3d8079925de93f5764d6f22https://git.kernel.org/stable/c/92196be82a4eb61813833dc62876fd198ae51ab1https://git.kernel.org/stable/c/c3ba0557ab2ef15a3663e2fb9b1a3d628a8c3daahttps://git.kernel.org/stable/c/f9e57e7ca77393b5b7072800370370b02eaad0f8