---
id: CVE-2024-50188
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: phy: dp83869: fix memory corruption when enabling fiber

  When configuring the fiber port, the DP83869 PHY driver incorrectly
  calls linkmode_set_bit() with a bit ma…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: phy: dp83869: fix memory corruption when enabling fiber

  When configuring the fiber port, the DP83869 PHY driver incorrectly
  calls linkmode_set_bit() with a bit ma…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.10, < 5.10.227'
  - 'linux_kernel >= 5.11, < 5.15.168'
  - 'linux_kernel >= 5.16, < 6.1.113'
  - 'linux_kernel >= 6.2, < 6.6.57'
  - 'linux_kernel >= 6.7, < 6.11.4'
  - linux_kernel = 6.12
patched:
  - linux_kernel 6.11.4
published: '2024-11-08'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:10.007'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-50188'
references:
  - url: 'https://git.kernel.org/stable/c/21b5af7f0c99b3bf1fd02016e6708b613acbcaf4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9ca634676ff66e1d616259e136f96f96b2a1759a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a842e443ca8184f2dc82ab307b43a8b38defd6a5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ad0d76b8ee5db063791cc2e7a30ffc9852ac37c4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c1944b4253649fc6f2fb53e7d6302eb414d2182c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e3f2de32dae35bc7d173377dc97b5bc9fcd9fc84'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-355557.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00225
epssPercentile: 0.1324
ingestedAt: '2026-10-15T03:30:12.766Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-10-01T20:18:28.121438Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: phy: dp83869: fix memory corruption when enabling fiber

When configuring the fiber port, the DP83869 PHY driver incorrectly
calls linkmode_set_bit() with a bit mask (1 << 10) rather than a bit
number (10). This corrupts some other memory location -- in case of
arm64 the priv pointer in the same structure.

Since the advertising flags are updated from supported at the end of the
function the incorrect line isn't needed at all and can be removed.

## Affected

- `linux_kernel >= 5.10, < 5.10.227`
- `linux_kernel >= 5.11, < 5.15.168`
- `linux_kernel >= 5.16, < 6.1.113`
- `linux_kernel >= 6.2, < 6.6.57`
- `linux_kernel >= 6.7, < 6.11.4`
- `linux_kernel = 6.12`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.11.4`