CVE-2024-35992

A flaw was found in the Linux kernel’s  phy-mvebu-a3700-comphy module. An out-of-bounds read in the comphy_gbe_phy_init function in the drivers/phy/marvell/phy-mvebu-a3700-comphy.c file can be triggered due to a missing check of an array size, resulting in a denial of service.

The phy-mvebu-a3700-comphy module is not built in the kernel shipped in Red Hat Enterprise Linux, so it is not affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.