Medium 5.5Published May 1, 2024

CVE-2024-27047net: phy: fix phy_get_internal_delay accessing an empty array

Updated under an hour ago (Oct 28, 2026, 12:50 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phy_get_internal_delay accessing an empty array The phy_get_internal_delay function could try to access to an empty array in the case that the driver is calling phy_get_internal_delay without defining delay_values and rx-internal-delay-ps or tx-internal-delay-ps is defined to 0 in the device-tree. This will lead to "unable to handle kernel NULL pointer dereference at virtual address 0". To avoid this kernel oops, the test should be delay >= 0. As there is already delay < 0 test just before, the test could only be size == 0.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 builds before 06dd21045a7e8bc8701b0ebedcd9a30a6325878b; 92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 builds before 0e939a002c8a7d66e60bd0ea6b281fb39d713c1a; 92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 builds before 2a2ff709511617de9c6c072eeee82bcbbdfecaf8; 92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 builds before 589ec16174dd9378953b8232ae76fad0a96e1563; from 92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 before c0691de7df1d51482a52cac93b7fe82fd9dd296b; 92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 builds before 0307cf443308ecc6be9b2ca312bb31bae5e5a7ad; 92252eec913b2dd5e7b5de11ea3efa2e64d65cf4 builds before 4469c0c5b14a0919f5965c7ceac96b523eb57b79	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.9 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2	NVD

References

References

https://git.kernel.org/stable/c/06dd21045a7e8bc8701b0ebedcd9a30a6325878b	patch
https://git.kernel.org/stable/c/0e939a002c8a7d66e60bd0ea6b281fb39d713c1a	patch
https://git.kernel.org/stable/c/2a2ff709511617de9c6c072eeee82bcbbdfecaf8	patch
https://git.kernel.org/stable/c/589ec16174dd9378953b8232ae76fad0a96e1563	patch
https://git.kernel.org/stable/c/c0691de7df1d51482a52cac93b7fe82fd9dd296b	patch
https://git.kernel.org/stable/c/0307cf443308ecc6be9b2ca312bb31bae5e5a7ad	patch
https://git.kernel.org/stable/c/4469c0c5b14a0919f5965c7ceac96b523eb57b79	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.