CVE-2024-35945: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35945 is a vulnerability discovered in the Linux kernel's network PHY (Physical Layer) device driver. The issue was identified and disclosed on May 19, 2024, affecting Linux kernel versions up to 6.6.27 and versions from 6.7 up to 6.8.6. The vulnerability relates to potential null pointer exceptions in the Interrupt Service Routine (ISR) when phydev->irq is set unconditionally without checking for valid interrupt handlers (NVD).

The vulnerability stems from a condition where the PHY device driver fails to properly validate interrupt handlers before setting up interrupt-based operation. Specifically, if phydev->irq is set unconditionally without verifying the existence of valid interrupt handlers, it can lead to null pointer exceptions in the interrupt service routine. The issue has been assigned a CVSS v3.1 base score of 5.5 (Medium) with a vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access requirements and potential high impact on availability (NVD).

The vulnerability can result in null pointer exceptions during interrupt handling, potentially leading to system instability or denial of service conditions. The impact is primarily focused on availability, with no direct effect on confidentiality or integrity of the system (NVD).

The vulnerability requires local access with low complexity and low privileges to exploit. No user interaction is needed for exploitation. There are no known reports of this vulnerability being exploited in the wild (NVD).

The vulnerability has been patched in the Linux kernel. The fix involves adding proper validation of interrupt handlers by implementing a check for valid interrupt handler or falling back to polling mode when necessary. The patch has been integrated into various kernel versions, including 6.8.0-38.38 for Ubuntu 24.04 LTS and other distribution-specific kernel versions (Ubuntu Security, Kernel Patch).