CVE-2024-50188

In the Linux kernel, the following vulnerability has been resolved:

net: phy: dp83869: fix memory corruption when enabling fiber

When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit number (10). This corrupts some other memory location -- in case of arm64 the priv pointer in the same structure.

Since the advertising flags are updated from supported at the end of the function the incorrect line isn't needed at all and can be removed.

This vulnerability is rated as having a Moderate impact because exploitation requires administrative privileges to configure the network interface and the physical presence of Texas Instruments DP83869 Ethernet PHY hardware, restricting the blast radius primarily to a local denial of service via kernel memory corruption. Standard Red Hat Enterprise Linux releases are not affected as the vulnerable driver logic is not present in supported enterprise kernels. Consequently, virtualized and typical enterprise deployments are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.