Bug 2324568 (CVE-2024-50188) - CVE-2024-50188 kernel: net: phy: dp83869: fix memory corruption when enabling fiber
Summary: CVE-2024-50188 kernel: net: phy: dp83869: fix memory corruption when enabling...
Keywords:
Status: NEW
Alias: CVE-2024-50188
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2324695
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-08 13:45 UTC by OSIDB Bzimport
Modified: 2024-11-21 18:51 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-08 13:45:54 UTC
In the Linux kernel, the following vulnerability has been resolved:

net: phy: dp83869: fix memory corruption when enabling fiber

When configuring the fiber port, the DP83869 PHY driver incorrectly
calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit
number (10). This corrupts some other memory location -- in case of
arm64 the priv pointer in the same structure.

Since the advertising flags are updated from supported at the end of the
function the incorrect line isn't needed at all and can be removed.


Note You need to log in before you can comment on or make changes to this bug.