CVE-2024-38584

net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()

Description

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() In the prueth_probe() function, if one of the calls to emac_phy_connect() fails due to of_phy_connect() returning NULL, then the subsequent call to phy_attached_info() will dereference a NULL pointer. Check the return code of emac_phy_connect and fail cleanly if there is an error.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.05%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/5cd17f0e74cb99d209945b9f1f06d411aa667eb1 patch
https://git.kernel.org/stable/c/b0a82ebabbdc4c307f781bb0e5cd617949a3900d patch
https://git.kernel.org/stable/c/1e1d5bd7f4682e6925dd960aba2a1aa1d93da53a patch
https://git.kernel.org/stable/c/b31c7e78086127a7fcaa761e8d336ee855a920c6 patch

Frequently Asked Questions

What is the severity of CVE-2024-38584?
CVE-2024-38584 has been scored as a medium severity vulnerability.
How to fix CVE-2024-38584?
To fix CVE-2024-38584, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-38584 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-38584 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-38584?
CVE-2024-38584 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.