CVE-2024-35945

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-05-19 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: phy_device: Prevent nullptr exceptions on ISR If phydev->irq is set unconditionally, check for valid interrupt handler or fall back to polling mode to prevent nullptr exceptions in interrupt service routine.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Linux Linux 49644e68f472c6480e015253fa4d7448c6cfa2aa < a4f082d6a90ecb6c980579ae170b27f48d5601f5
Linux Linux 49644e68f472c6480e015253fa4d7448c6cfa2aa < 7a71f61ebf95cedd3f245db6da397822971d8db5
Linux Linux 49644e68f472c6480e015253fa4d7448c6cfa2aa < 3419ee39e3d3162ab2ec9942bb537613ed5b6311
Linux Linux 49644e68f472c6480e015253fa4d7448c6cfa2aa < 61c81872815f46006982bb80460c0c80a949b35b
Linux Linux 5.3
linux linux_kernel < 6.6.27

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.21%
Raw Score 0.002130
Percentile 11.7%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00213
2026-10-29
0.00213

Intelligence Sources

mitre ref →
nvd ref →