← CVE Intelligence

CVE-2024-26855

net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently in nla_for_each_nested(). To address this issue, add a check to ensure that br_spec is not NULL before proceeding with the nested attribute iteration.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before d9fefc51133107e59d192d773be86c1150cfeebb; affected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before 37fe99016b12d32100ce670216816dba6c48b309; affected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before 8d95465d9a424200485792858c5b3be54658ce19; affected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before afdd29726a6de4ba27cd15590661424c888dc596; affected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before 1a770927dc1d642b22417c3e668c871689fc58b3; affected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before 0e296067ae0d74a10b4933601f9aa9f0ec8f157f; affected b1edc14a3fbfe0154a2aecb8bb9775c3012cb6e2 before 06e456a05d669ca30b224b8ed962421770c1496c
Linux / Linuxaffected 4.20; unaffected 0 before 4.20; unaffected 5.4.272 through 5.4.*; unaffected 5.10.213 through 5.10.*; unaffected 5.15.152 through 5.15.*; unaffected 6.1.82 through 6.1.*; unaffected 6.6.22 through 6.6.*; unaffected 6.7.10 through 6.7.*; unaffected 6.8 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

siemens-SADP

No English description supplied.