CVE-2024-50188
High
Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit number (10). This corrupts some other memory location -- in case of arm64 the priv pointer in the same structure. Since the advertising flags are updated from supported at the end of the function the incorrect line isn't needed at all and can be removed.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux Kernel
PublishedNov 8, 2024
First seenNov 8, 2024
How to fix
Update
- linux linux_kernel5.10.227, 5.15.168, 6.1.113, 6.6.57, 6.11.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.10 ≤ v < 5.10.227, 5.11 ≤ v < 5.15.168, 5.16 ≤ v < 6.1.113, 6.2 ≤ v < 6.6.57, 6.7 ≤ v < 6.11.4, 6.12 | 5.10.227, 5.15.168, 6.1.113, 6.6.57, 6.11.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.