Answer in brief
CVE-2024-42224 records a Unknown severity vulnerability in net: dsa: mv88e6xxx: Correct check for empty list. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-42224 records a Unknown severity vulnerability in net: dsa: mv88e6xxx: Correct check for empty list. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <47d28dde172696031c880c5778633cdca30394ee || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <3bf8d70e1455f87856640c3433b3660a31001618 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <2a2fe25a103cef73cde356e6d09da10f607e93f5 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <8c2c3cca816d074c75a2801d1ca0dea7b0148114 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <aa03f591ef31ba603a4a99d05d25a0f21ab1cd89 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <3f25b5f1635449036692a44b771f39f772190c1d || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <f75625db838ade28f032dacd0f0c8baca42ecde4 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <4c7f3950a9fd53a62b156c0fe7c3a2c43b0ba19b | 47d28dde172696031c880c5778633cdca30394ee, 3bf8d70e1455f87856640c3433b3660a31001618, 2a2fe25a103cef73cde356e6d09da10f607e93f5, 8c2c3cca816d074c75a2801d1ca0dea7b0148114, aa03f591ef31ba603a4a99d05d25a0f21ab1cd89, 3f25b5f1635449036692a44b771f39f772190c1d, f75625db838ade28f032dacd0f0c8baca42ecde4, 4c7f3950a9fd53a62b156c0fe7c3a2c43b0ba19b |
| Linux/Linuxgeneric | 4.11 | Not reported |
Published upstream
Jul 30, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses") mv88e6xxx_default_mdio_bus() has checked that the return value of list_first_entry() is non-NULL. This appears to be intended to guard against the list chip->mdios being empty. However, it is not the correct check as the implementation of list_first_entry is not designed to return NULL for empty lists. Instead, use list_first_entry_or_null() which does return NULL if the list is empty. Flagged by Smatch. Compile tested only.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <47d28dde172696031c880c5778633cdca30394ee || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <3bf8d70e1455f87856640c3433b3660a31001618 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <2a2fe25a103cef73cde356e6d09da10f607e93f5 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <8c2c3cca816d074c75a2801d1ca0dea7b0148114 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <aa03f591ef31ba603a4a99d05d25a0f21ab1cd89 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <3f25b5f1635449036692a44b771f39f772190c1d || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <f75625db838ade28f032dacd0f0c8baca42ecde4 || >=a3c53be55c955b7150cda17874c3fcb4eeb97a89 <4c7f3950a9fd53a62b156c0fe7c3a2c43b0ba19b | 47d28dde172696031c880c5778633cdca30394ee, 3bf8d70e1455f87856640c3433b3660a31001618, 2a2fe25a103cef73cde356e6d09da10f607e93f5, 8c2c3cca816d074c75a2801d1ca0dea7b0148114, aa03f591ef31ba603a4a99d05d25a0f21ab1cd89, 3f25b5f1635449036692a44b771f39f772190c1d, f75625db838ade28f032dacd0f0c8baca42ecde4, 4c7f3950a9fd53a62b156c0fe7c3a2c43b0ba19b |
| Linux/Linuxgeneric | 4.11 | Not reported |
Published upstream
Jul 30, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses") mv88e6xxx_default_mdio_bus() has checked that the return value of list_first_entry() is non-NULL. This appears to be intended to guard against the list chip->mdios being empty. However, it is not the correct check as the implementation of list_first_entry is not designed to return NULL for empty lists. Instead, use list_first_entry_or_null() which does return NULL if the list is empty. Flagged by Smatch. Compile tested only.
Quoted source text, attributed separately from HOL analysis.