CVE-2024-50188
MEDIUMLinux Kernel 5.10-6.11.3 - Memory Corruption via DP83869 Fiber Port Configuration
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit number (10). This corrupts some other memory location -- in case of arm64 the priv pointer in the same structure. Since the advertising flags are updated from supported at the end of the function the incorrect line isn't needed at all and can be removed.
References (10)
Core 10
Core References
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-355557.html
Scores
CVSS v3
5.5
EPSS
0.0022
EPSS Percentile
12.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (21)
linux/Kernel
5.10.0 - 5.10.227linux
linux/Kernel
5.11.0 - 5.15.168linux
linux/Kernel
5.16.0 - 6.1.113linux
linux/Kernel
6.2.0 - 6.6.57linux
linux/Kernel
6.7.0 - 6.11.4linux
Linux/Linux
< 5.10
Linux/Linux
5.10
Linux/Linux
5.10.227 - 5.10.*
Linux/Linux
5.15.168 - 5.15.*
Linux/Linux
6.1.113 - 6.1.*
... and 11 more
Published
Nov 08, 2024
Tracked Since
Feb 18, 2026