CVE-2024-35796: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name. This eventually ends up in platform_get_resource_byname in the call stack, where it causes a null pointer in strcmp. if (type == resource_type(r) && !strcmp(r->name, name)) It should have been replaced with devm_platform_ioremap_resource.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 5.8.2, before 5.10.215 (fixed in 5.10.215); from 5.11, before 5.15.154 (fixed in 5.15.154); from 5.16, before 6.1.84 (fixed in 6.1.84); from 6.2, before 6.6.24 (fixed in 6.6.24); from 6.7, before 6.7.12 (fixed in 6.7.12); from 6.8, before 6.8.3 (fixed in 6.8.3); …

Published 2024-05-17. Last modified 2026-06-17.