CVE-2024-26587: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26587 is a vulnerability in the Linux kernel's netdevsim module that was discovered and disclosed in February 2024. The issue involves a NULL pointer dereference when attempting to destroy PHC (Precision Hardware Clock) on Virtual Functions (VFs). This vulnerability affects Linux kernel versions up to (excluding) 6.6.14 and versions from (including) 6.7.0 up to (excluding) 6.7.2 (NVD).

The vulnerability occurs in the netdevsim module where PHC gets initialized in nsim_init_netdevsim() function, which is only called if (nsim_dev_port_is_pf()). The issue manifests when trying to destroy netdevsim with VFs instantiated, leading to a kernel NULL pointer dereference at address 0x00000000000000b8. The CVSS v3.1 base score is 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Kernel Patch).

The vulnerability can cause a kernel crash when attempting to destroy netdevsim with Virtual Functions instantiated. This primarily affects system availability through a NULL pointer dereference, which can lead to system instability or denial of service (NVD).

The vulnerability has been patched by creating a counterpart of nsim_init_netdevsim() and moving the mock_phc_destroy() function there. The fix is available in Linux kernel versions 6.6.14 and 6.7.2 and later. Users should update their kernel to these or newer versions to mitigate the vulnerability (Kernel Patch).