CVE-2024-27047
Linux Kernel Driver Null Pointer Dereference Vulnerability (Phy Get Internal Delay)
Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phy_get_internal_delay accessing an empty array The phy_get_internal_delay function could try to access to an empty array in the case that the driver is calling phy_get_internal_delay without defining delay_values and rx-internal-delay-ps or tx-internal-delay-ps is defined to 0 in the device-tree. This will lead to "unable to handle kernel NULL pointer dereference at virtual address 0". To avoid this kernel oops, the test should be delay >= 0. As there is already delay < 0 test just before, the test could only be size == 0.
INFO
Published Date :
May 1, 2024, 1:15 p.m.
Last Modified :
Dec. 23, 2024, 7:14 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-27047.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-27047 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-27047 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Dec. 23, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NIST CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.9 up to (excluding) 5.10.214 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.153 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.83 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.23 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.7.11 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.8 up to (excluding) 6.8.2 Changed Reference Type https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad No Types Assigned https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad Patch Changed Reference Type https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad No Types Assigned https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad Patch Changed Reference Type https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b No Types Assigned https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b Patch Changed Reference Type https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b No Types Assigned https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b Patch Changed Reference Type https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a No Types Assigned https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a Patch Changed Reference Type https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a No Types Assigned https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a Patch Changed Reference Type https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8 No Types Assigned https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8 Patch Changed Reference Type https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8 No Types Assigned https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8 Patch Changed Reference Type https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79 No Types Assigned https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79 Patch Changed Reference Type https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79 No Types Assigned https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79 Patch Changed Reference Type https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563 No Types Assigned https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563 Patch Changed Reference Type https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563 No Types Assigned https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563 Patch Changed Reference Type https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b No Types Assigned https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b Patch Changed Reference Type https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b No Types Assigned https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b Patch Changed Reference Type https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html No Types Assigned https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad Added Reference https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b Added Reference https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a Added Reference https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8 Added Reference https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79 Added Reference https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563 Added Reference https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b Added Reference https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 05, 2024
Action Type Old Value New Value Removed Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 25, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 14, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 01, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phy_get_internal_delay accessing an empty array The phy_get_internal_delay function could try to access to an empty array in the case that the driver is calling phy_get_internal_delay without defining delay_values and rx-internal-delay-ps or tx-internal-delay-ps is defined to 0 in the device-tree. This will lead to "unable to handle kernel NULL pointer dereference at virtual address 0". To avoid this kernel oops, the test should be delay >= 0. As there is already delay < 0 test just before, the test could only be size == 0. Added Reference kernel.org https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-27047 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-27047
weaknesses.