CVE-2024-43836: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in the ethnl_set_pse_validate() call.

Affected products

• Linux Linux Kernel: from 6.10, before 6.10.3 (fixed in 6.10.3)

Published 2024-08-17. Last modified 2026-06-17.