In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang static checker (scan-build) warning: net/ethtool/ioctl.c:line 2233, column 2 Called function pointer is null (null dereference). Return '-EOPNOTSUPP' when 'ops->get_ethtool_phy_stats' is NULL to fix this typo error.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.31.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:5363 2024-08-15T00:00:00Z
kernel-0:5.14.0-427.31.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:5363 2024-08-15T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/0dcc53abf58d572d34c5313de85f607cd33fc691 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/6548d543a27449a1a3d8079925de93f5764d6f22 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/92196be82a4eb61813833dc62876fd198ae51ab1 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024071215-CVE-2024-40928-0331@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-40928 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-40928 cve-icon
History

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 16 Aug 2024 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 14 Aug 2024 01:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-12T12:25:07.769Z

Updated: 2024-09-11T17:33:03.056Z

Reserved: 2024-07-12T12:17:45.583Z

Link: CVE-2024-40928

cve-icon Vulnrichment

Updated: 2024-08-02T04:39:55.350Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-12T13:15:15.550

Modified: 2024-07-12T16:34:58.687

Link: CVE-2024-40928

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-12T00:00:00Z

Links: CVE-2024-40928 - Bugzilla