7

CVE-2024-42224: linux

CVSS: 7.0v3.1HighModified
AliasesUBUNTU-CVE-2024-42224DEBIAN-CVE-2024-42224
Published 30-07-2024Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2024-42224 is a high (CVSS 7.0) vulnerability in linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.4% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.0/10
010
High · v3.1 (CVE.org)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 35 · Related 31
DLA-4008-1DSA-5747-1MGASA-2024-0277MGASA-2024-0278SUSE-SU-2024:2892-1SUSE-SU-2024:2894-1

Timeline

  1. 30-07-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses") mv88e6xxx_default_mdio_bus() has checked that the return value of list_first_entry() is non-NULL. This appears to be intended to guard against the list chip->mdios being empty. However, it is not the correct check as the implementation of list_first_entry is not designed to return NULL for empty lists. Instead, use list_first_entry_or_null() which does return NULL if the list is empty. Flagged by Smatch. Compile tested only.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu128 products
  • linux< 4.15.0-229.241 | < 5.4.0-195.215 | < 5.15.0-121.131 | < 6.8.0-45.45
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.15.0-1173.186 | < 5.4.0-1132.142 | < 5.15.0-1069.75 | < 6.8.0-1016.17
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < 47d28dde172696031c880c5778633cdca30394ee | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < 3bf8d70e1455f87856640c3433b3660a31001618 | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < 2a2fe25a103cef73cde356e6d09da10f607e93f5 | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < 8c2c3cca816d074c75a2801d1ca0dea7b0148114 | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < aa03f591ef31ba603a4a99d05d25a0f21ab1cd89 | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < 3f25b5f1635449036692a44b771f39f772190c1d | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < f75625db838ade28f032dacd0f0c8baca42ecde4 | ≥ a3c53be55c955b7150cda17874c3fcb4eeb97a89, < 4c7f3950a9fd53a62b156c0fe7c3a2c43b0ba19b | 4.11
  • linux_kernel≥ 4.11, < 4.19.318 | ≥ 4.20, < 5.4.280 | ≥ 5.5, < 5.10.222 | ≥ 5.11, < 5.15.163 | ≥ 5.16, < 6.1.98 | ≥ 6.2, < 6.6.39 | ≥ 6.7, < 6.9.9
Debian1 product
  • linux< 6.1.98-1 | < 6.9.9-1

3 vendors · 131 products

References

34 links
Show all 34 references