CVE-2024-50023

A flaw was found in the Linux kernel's network physical layer (PHY) driver. When a PHY device is unregistered, a missing step to remove its associated LED entry from a list can occur. This vulnerability can be triggered in a specific scenario where a PHY port is repeatedly brought down and up, and its kernel module is removed and re-added. Successful exploitation of this flaw leads to a kernel panic, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.