| From bippy-5f407fcff5a0 Mon Sep 17 00:00:00 2001 |
| From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| To: <linux-cve-announce@vger.kernel.org> |
| Reply-to: <cve@kernel.org>, <linux-kernel@vger.kernel.org> |
| Subject: CVE-2024-50188: net: phy: dp83869: fix memory corruption when enabling fiber |
| |
| Description |
| =========== |
| |
| In the Linux kernel, the following vulnerability has been resolved: |
| |
| net: phy: dp83869: fix memory corruption when enabling fiber |
| |
| When configuring the fiber port, the DP83869 PHY driver incorrectly |
| calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit |
| number (10). This corrupts some other memory location -- in case of |
| arm64 the priv pointer in the same structure. |
| |
| Since the advertising flags are updated from supported at the end of the |
| function the incorrect line isn't needed at all and can be removed. |
| |
| The Linux kernel CVE team has assigned CVE-2024-50188 to this issue. |
| |
| |
| Affected and fixed versions |
| =========================== |
| |
| Issue introduced in 5.10 with commit a29de52ba2a156873505d8b8cef44e69925b8114 and fixed in 5.10.227 with commit 21b5af7f0c99b3bf1fd02016e6708b613acbcaf4 |
| Issue introduced in 5.10 with commit a29de52ba2a156873505d8b8cef44e69925b8114 and fixed in 5.15.168 with commit ad0d76b8ee5db063791cc2e7a30ffc9852ac37c4 |
| Issue introduced in 5.10 with commit a29de52ba2a156873505d8b8cef44e69925b8114 and fixed in 6.1.113 with commit c1944b4253649fc6f2fb53e7d6302eb414d2182c |
| Issue introduced in 5.10 with commit a29de52ba2a156873505d8b8cef44e69925b8114 and fixed in 6.6.57 with commit 9ca634676ff66e1d616259e136f96f96b2a1759a |
| Issue introduced in 5.10 with commit a29de52ba2a156873505d8b8cef44e69925b8114 and fixed in 6.11.4 with commit e3f2de32dae35bc7d173377dc97b5bc9fcd9fc84 |
| Issue introduced in 5.10 with commit a29de52ba2a156873505d8b8cef44e69925b8114 and fixed in 6.12 with commit a842e443ca8184f2dc82ab307b43a8b38defd6a5 |
| |
| Please see https://www.kernel.org for a full list of currently supported |
| kernel versions by the kernel community. |
| |
| Unaffected versions might change over time as fixes are backported to |
| older supported kernel versions. The official CVE entry at |
| https://cve.org/CVERecord/?id=CVE-2024-50188 |
| will be updated if fixes are backported, please check that for the most |
| up to date information about this issue. |
| |
| |
| Affected files |
| ============== |
| |
| The file(s) affected by this issue are: |
| drivers/net/phy/dp83869.c |
| |
| |
| Mitigation |
| ========== |
| |
| The Linux kernel CVE team recommends that you update to the latest |
| stable kernel version for this, and many other bugfixes. Individual |
| changes are never tested alone, but rather are part of a larger kernel |
| release. Cherry-picking individual commits is not recommended or |
| supported by the Linux kernel community at all. If however, updating to |
| the latest release is impossible, the individual changes to resolve this |
| issue can be found at these commits: |
| https://git.kernel.org/stable/c/21b5af7f0c99b3bf1fd02016e6708b613acbcaf4 |
| https://git.kernel.org/stable/c/ad0d76b8ee5db063791cc2e7a30ffc9852ac37c4 |
| https://git.kernel.org/stable/c/c1944b4253649fc6f2fb53e7d6302eb414d2182c |
| https://git.kernel.org/stable/c/9ca634676ff66e1d616259e136f96f96b2a1759a |
| https://git.kernel.org/stable/c/e3f2de32dae35bc7d173377dc97b5bc9fcd9fc84 |
| https://git.kernel.org/stable/c/a842e443ca8184f2dc82ab307b43a8b38defd6a5 |
