Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-38593 Details

Description

In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit started to use the ptp workqueue to get the second part of the timestamp. And when the port was set down, then this workqueue is stopped. But if the config option NETWORK_PHY_TIMESTAMPING is not enabled, then the ptp_clock is not initialized so then it would crash when it would try to access the delayed work. So then basically by setting up and then down the port, it would crash. The fix consists in checking if the ptp_clock is initialized and only then cancel the delayed work.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/3ddf170e4a604f5d4d9459a36993f5e92b53e8b0	kernel.org	Patch
https://git.kernel.org/stable/c/3fd4282d5f25c3c97fef3ef0b89b82ef4e2bc975	kernel.org	Patch
https://git.kernel.org/stable/c/64a47cf634ae44e92be24ebc982410841093bd7b	kernel.org	Patch
https://git.kernel.org/stable/c/aea27a92a41dae14843f92c79e9e42d8f570105c	kernel.org	Patch
https://git.kernel.org/stable/c/3ddf170e4a604f5d4d9459a36993f5e92b53e8b0	CVE	Patch
https://git.kernel.org/stable/c/3fd4282d5f25c3c97fef3ef0b89b82ef4e2bc975	CVE	Patch
https://git.kernel.org/stable/c/64a47cf634ae44e92be24ebc982410841093bd7b	CVE	Patch
https://git.kernel.org/stable/c/aea27a92a41dae14843f92c79e9e42d8f570105c	CVE	Patch

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-908	Use of Uninitialized Resource	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 6.5, < 6.6.33 >= 6.7, < 6.8.12 >= 6.9, < 6.9.3
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Oct 20, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Nov 6, 2024	CVE Modified	CISA-ADP
Jun 19, 2024	New CVE Received	kernel.org