CVE-2024-38593

net: micrel: Fix receiving the timestamp in the frame for lan8841

Medium · published June 19, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: micrel: Fix receiving the timestamp in the frame for lan8841

The blamed commit started to use the ptp workqueue to get the second

part of the timestamp. And when the port was set down, then this

workqueue is stopped. But if the config option NETWORK_PHY_TIMESTAMPING

is not enabled, then the ptp_clock is not initialized so then it would

crash when it would try to access the delayed work.

So then basically by setting up and then down the port, it would crash.

The fix consists in checking if the ptp_clock is initialized and only

then cancel the delayed work.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Published
2024-06-19T13:45Z
EPSS history
Timeline
  • 19 JUN 13:45Z
    net: micrel: Fix receiving the timestamp in the frame for lan8841
    cvelistv5