CVE-2024-26587

linux: In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: don't try to destroy PHC on VFs...

CVE-2024-26587 is fixed in 15 products on 1 platform, first by DEBIAN-CVE-2024-26587, released February 22, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0022
13th percentile

In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: don't try to destroy PHC on VFs PHC gets initialized in nsim_init_netdevsim(), which is only called if (nsim_dev_port_is_pf()). Create a counterpart of nsim_init_netdevsim() and move the mock_phc_destroy() there. This fixes a crash trying to destroy netdevsim with VFs instantiated, as caught by running the devlink.sh test: BUG: kernel NULL pointer dereference, address: 00000000000000b8 RIP: 0010:mock_phc_destroy+0xd/0x30 Call Trace: <TASK> nsim_destroy+0x4a/0x70 [netdevsim] __nsim_dev_port_del+0x47/0x70 [netdevsim] nsim_dev_reload_destroy+0x105/0x120 [netdevsim] nsim_drv_remove+0x2f/0xb0 [netdevsim] device_release_driver_internal+0x1a1/0x210 bus_remove_device+0xd5/0x120 device_del+0x159/0x490 device_unregister+0x12/0x30 del_device_store+0x11a/0x1a0 [netdevsim] kernfs_fop_write_iter+0x130/0x1d0 vfs_write+0x30b/0x4b0 ksys_write+0x69/0xf0 do_syscall_64+0xcc/0x1e0 entry_SYSCALL_64_after_hwframe+0x6f/0x77

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
bpftool · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-container · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-container · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-container-debug · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-container-debug · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-core · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-core · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-core · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-core · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-devel · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-devel · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-modules · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-modules · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-modules-extra · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-debug-modules-extra · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-devel · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-devel · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-doc · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-doc · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-modules · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-modules · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-modules-extra · ol 8 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
kernel-uek-modules-extra · ol 9 0:5.15.0-300.163.18.el9uek ELSA-2024-12682 Sep 23, 2024
linux · Debian 13.5 (trixie) 6.6.15-1 DEBIAN-CVE-2024-26587 Feb 22, 2024
linux · Debian 14 6.6.15-1 DEBIAN-CVE-2024-26587 Feb 22, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.