CVE-2024-38559 – This CVE describes a NULL pointer dereference v... (How to Fix)

Q: What is the severity of CVE-2024-38559?

CVE-2024-38559 has a CVSS score of 4.4 (MEDIUM). This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's QLogic FastLinQ 4xxxx Ethernet Controller driver (qedf). An attacker with local access could trigger an out-of-bounds read by providing untrusted input, potentially causing kernel panic or information disclosure. Systems using affected kernel versions with the qedf module loaded are vulnerable.

📋 TL;DR

This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's QLogic FastLinQ 4xxxx Ethernet Controller driver (qedf). An attacker with local access could trigger an out-of-bounds read by providing untrusted input, potentially causing kernel panic or information disclosure. Systems using affected kernel versions with the qedf module loaded are vulnerable.

💻 Affected Systems

Products:

Linux kernel

Versions: Kernel versions before the fix commits listed in references

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ✅ No

Notes: Only vulnerable if the qedf driver module is loaded (typically on systems with QLogic FastLinQ 4xxxx Ethernet Controllers).

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local privilege escalation leading to full system compromise or denial of service through kernel panic.

🟠

Likely Case

Local denial of service (system crash) or information disclosure from kernel memory.

🟢

If Mitigated

Minimal impact if proper access controls restrict local user privileges and the qedf module is not loaded.

🌐 Internet-Facing: LOW - Requires local access to exploit.

🏢 Internal Only: MEDIUM - Malicious local users or compromised accounts could exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires local access and knowledge of driver interaction. No public exploits known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing the fix commits (e.g., 177f43c6892e6055de6541fe9391a8a3d1f95fc9)

Vendor Advisory: https://git.kernel.org/stable/c/177f43c6892e6055de6541fe9391a8a3d1f95fc9

Restart Required: Yes

Instructions:

1. Update Linux kernel to a patched version from your distribution vendor. 2. Reboot the system to load the new kernel.

🔧 Temporary Workarounds

Unload qedf module

linux

Remove the vulnerable kernel module if not needed

sudo rmmod qedf

Blacklist qedf module

linux

Prevent the module from loading automatically

echo 'blacklist qedf' | sudo tee /etc/modprobe.d/blacklist-qedf.conf

🧯 If You Can't Patch

Restrict local user access to prevent untrusted users from interacting with the driver.
Monitor system logs for kernel panic events or unusual driver behavior.

🔍 How to Verify

Check if Vulnerable:

Check if qedf module is loaded: lsmod | grep qedf. If loaded and kernel version is unpatched, system is vulnerable.

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes fix commit: grep -q '177f43c6892e6055de6541fe9391a8a3d1f95fc9' /proc/version_signature (if available) or check distribution patch notes.

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages in /var/log/kern.log or dmesg
OOB read errors related to qedf driver

SIEM Query:

source="kern.log" AND "qedf" AND ("panic" OR "OOB" OR "out of bounds")

📊 Metadata

CVE ID: CVE-2024-38559

CVSS v3 Score: 4.4 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-476

Published: June 19, 2024

Last Updated: November 4, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-38559, you might also want to check these: