CVE-2024-26600

A NULL pointer dereference flaw was found in the Linux kernel in the phy-omap-usb2 driver. This issue arises when the external PHY used with phy-omap-usb2 does not implement the send_srp() function. If this function is called without proper implementation, it can result in a system crash, especially during operations like waking up an idle Ethernet gadget.

CVE-2024-26600 is rated as a Low severity because the vulnerability involves a NULL pointer dereference in the phy-omap-usb2 driver, leading to a kernel crash only under specific conditions where the external PHY lacks the send_srp() implementation. This issue does not allow for arbitrary code execution or privilege escalation, limiting its impact to a denial of service (DoS) condition that affects system stability but not security integrity. The specific hardware and configuration requirements further reduce the likelihood of widespread exploitation, justifying its classification.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.