In the Linux kernel, the following vulnerability has been resolved:
net: phy: fix phygetinternal_delay accessing an empty array
The phygetinternaldelay function could try to access to an empty array in the case that the driver is calling phygetinternaldelay without defining delay_values and rx-internal-delay-ps or tx-internal-delay-ps is defined to 0 in the device-tree. This will lead to "unable to handle kernel NULL pointer dereference at virtual address 0". To avoid this kernel oops, the test should be delay
= 0. As there is already delay < 0 test just before, the test could only be size == 0.
{ "vanir_signatures": [ { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-0e38aeb7", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0691de7df1d51482a52cac93b7fe82fd9dd296b", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-4548f7f6", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0307cf443308ecc6be9b2ca312bb31bae5e5a7ad", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-488b4850", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0307cf443308ecc6be9b2ca312bb31bae5e5a7ad", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-58b8b8b3", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e939a002c8a7d66e60bd0ea6b281fb39d713c1a", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-676211b0", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0691de7df1d51482a52cac93b7fe82fd9dd296b", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-6925d7a3", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@589ec16174dd9378953b8232ae76fad0a96e1563", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-768fe2e8", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a2ff709511617de9c6c072eeee82bcbbdfecaf8", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-87e4596a", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06dd21045a7e8bc8701b0ebedcd9a30a6325878b", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-8d38059f", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4469c0c5b14a0919f5965c7ceac96b523eb57b79", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "drivers/net/phy/phy_device.c" }, "id": "CVE-2024-27047-95eb6eeb", "digest": { "threshold": 0.9, "line_hashes": [ "301868317630222209846955061108596470805", "124135321110498106923993596018175730101", "249414939499550471549357921214698215263", "186299299659937444624040083336851556205" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a2ff709511617de9c6c072eeee82bcbbdfecaf8", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-bf4d6102", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4469c0c5b14a0919f5965c7ceac96b523eb57b79", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-cc5b25ec", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e939a002c8a7d66e60bd0ea6b281fb39d713c1a", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-db923719", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@589ec16174dd9378953b8232ae76fad0a96e1563", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "drivers/net/phy/phy_device.c", "function": "phy_get_internal_delay" }, "id": "CVE-2024-27047-f2eaa9a9", "digest": { "length": 1160.0, "function_hash": "104167563329157527553591605645214347141" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06dd21045a7e8bc8701b0ebedcd9a30a6325878b", "deprecated": false, "signature_version": "v1" } ] }