Bug 1554199 (CVE-2018-8043) - CVE-2018-8043 kernel: NULL pointer dereference in drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() can lead to denial of service
Summary: CVE-2018-8043 kernel: NULL pointer dereference in drivers/net/phy/mdio-bcm-un...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2018-8043
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1554200 1556978 1556979
Blocks: 1554204
TreeView+ depends on / blocked
 
Reported: 2018-03-12 04:03 UTC by Sam Fowler
Modified: 2021-12-10 15:47 UTC (History)
39 users (show)

Fixed In Version: kernel 4.16-rc1
Doc Type: If docs needed, set a value
Doc Text:
The Linux kernel was found vulnerable to a NULL pointer dereference in the drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() function caused by an unchecked return value from the platform_get_resource() function. A successful flaw exploitation can cause a system panic and a denial of service. This flaw is believed not to be an attacker triggerable as bad return value can be caused by hardware misconfiguration.
Clone Of:
Environment:
Last Closed: 2021-10-27 10:54:30 UTC
Embargoed:

Attachments (Terms of Use)

Description Sam Fowler 2018-03-12 04:03:39 UTC 
The Linux kernel was found vulnerable to a NULL pointer dereference in the drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() function caused by an unchecked return value from the platform_get_resource() function. A successful flaw exploitation can cause a system panic and a denial of service. This flaw is believed not to be an attacker triggerable as bad return value can be caused by hardware misconfiguration.

References:

https://marc.info/?l=kernel-janitors&m=151566944123938&w=2

An upstream fix:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=297a6961ffb8ff4dc66c9fbf53b924bd1dda05d5
Comment 1 Sam Fowler 2018-03-12 04:04:40 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1554200]
Comment 6 Fedora Update System 2018-03-16 16:18:01 UTC 
kernel-4.15.9-200.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.