CVE-2024-26587

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
22/02/2024
Last modified:
18/03/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: netdevsim: don&amp;#39;t try to destroy PHC on VFs<br /> <br /> PHC gets initialized in nsim_init_netdevsim(), which<br /> is only called if (nsim_dev_port_is_pf()).<br /> <br /> Create a counterpart of nsim_init_netdevsim() and<br /> move the mock_phc_destroy() there.<br /> <br /> This fixes a crash trying to destroy netdevsim with<br /> VFs instantiated, as caught by running the devlink.sh test:<br /> <br /> BUG: kernel NULL pointer dereference, address: 00000000000000b8<br /> RIP: 0010:mock_phc_destroy+0xd/0x30<br /> Call Trace:<br /> <br /> nsim_destroy+0x4a/0x70 [netdevsim]<br /> __nsim_dev_port_del+0x47/0x70 [netdevsim]<br /> nsim_dev_reload_destroy+0x105/0x120 [netdevsim]<br /> nsim_drv_remove+0x2f/0xb0 [netdevsim]<br /> device_release_driver_internal+0x1a1/0x210<br /> bus_remove_device+0xd5/0x120<br /> device_del+0x159/0x490<br /> device_unregister+0x12/0x30<br /> del_device_store+0x11a/0x1a0 [netdevsim]<br /> kernfs_fop_write_iter+0x130/0x1d0<br /> vfs_write+0x30b/0x4b0<br /> ksys_write+0x69/0xf0<br /> do_syscall_64+0xcc/0x1e0<br /> entry_SYSCALL_64_after_hwframe+0x6f/0x77

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.6.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7.0 (including) 6.7.2 (excluding)