CVE-2024-26855

Katalog CVE

CVSS 5.5 · Medium EPSS 0,25%

Kerentanan NULL Pointer Dereference pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently in nla_for_each_nested(). To address this issue, add a check to ensure that br_spec is not NULL before proceeding with the nested attribute iteration.

Rincian

Terbit di NVD

17 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/06e456a05d669ca30b224b8ed962421770c1496c patch
• https://git.kernel.org/stable/c/0e296067ae0d74a10b4933601f9aa9f0ec8f157f patch
• https://git.kernel.org/stable/c/1a770927dc1d642b22417c3e668c871689fc58b3 patch
• https://git.kernel.org/stable/c/37fe99016b12d32100ce670216816dba6c48b309 patch
• https://git.kernel.org/stable/c/8d95465d9a424200485792858c5b3be54658ce19 patch
• https://git.kernel.org/stable/c/afdd29726a6de4ba27cd15590661424c888dc596 patch
• https://git.kernel.org/stable/c/d9fefc51133107e59d192d773be86c1150cfeebb patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html