net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.3%
exploitation probability
0.3%top 85% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
The function ice_bridge_setlink() may encounter a NULL pointer dereference
if nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently
in nla_for_each_nested(). To address this issue, add a check to ensure that
br_spec is not NULL before proceeding with the nested attribute iteration.
Affected products
Linux · LinuxReferences
https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://git.kernel.org/stable/c/06e456a05d669ca30b224b8ed962421770c1496chttps://git.kernel.org/stable/c/0e296067ae0d74a10b4933601f9aa9f0ec8f157fhttps://git.kernel.org/stable/c/1a770927dc1d642b22417c3e668c871689fc58b3https://git.kernel.org/stable/c/37fe99016b12d32100ce670216816dba6c48b309https://git.kernel.org/stable/c/8d95465d9a424200485792858c5b3be54658ce19https://git.kernel.org/stable/c/afdd29726a6de4ba27cd15590661424c888dc596https://git.kernel.org/stable/c/d9fefc51133107e59d192d773be86c1150cfeebbhttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html