CVE-2024-35796

What it actually does

Incorrect replacement of platform_get_resource with devm_platform_ioremap_resource_byname using index 0 as name leads to platform_get_resource_byname receiving a null name, causing null pointer dereference inside strcmp during resource lookup in the ll_temac driver.

Why it matters to the business

Kernel panic or driver initialization failure on systems using the Xilinx ll_temac Ethernet controller, resulting in loss of network connectivity and potential system instability until patched kernels are deployed.

How an attack unfolds

An attacker with local access or the ability to trigger module load on affected hardware causes the ll_temac probe path to execute the faulty ioremap call; the subsequent strcmp on a null name pointer crashes the kernel.

How to fix it

Update the Linux kernel to the commit 6d9395ba7f85bdb7af0b93272e537484ecbeff48 or later stable releases that restore the correct devm_platform_ioremap_resource usage for the ll_temac driver.

How to confirm the fix worked

Confirm the running kernel contains commit 6d9395ba7f85bdb7af0b93272e537484ecbeff48; inspect the ll_temac probe function for the correct devm_platform_ioremap_resource call and test device enumeration without crash.

Typical attack path

1. Gain local execution or control hardware that loads the ll_temac driver
2. Trigger device probe or module initialization
3. Execute the erroneous devm_platform_ioremap_resource_byname(..., 0) call
4. Reach platform_get_resource_byname with null name argument
5. Dereference null inside strcmp and crash the kernel

How to detect it

Search kernel logs and crash dumps for null pointer dereference inside strcmp originating from platform_get_resource_byname during ll_temac or Xilinx TEMAC device probe.

What your security team should do

• Prioritize kernel upgrade to the fixed commit on all systems exposing the ll_temac driver
• Audit custom or downstream kernels for the same incorrect replacement pattern
• Monitor kernel oops logs for strcmp null dereference during Ethernet driver initialization