CVE-2024-56679

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c

MEDIUM
5.5
CVSS Score
Published: December 28, 2024 at 09:46 AM UTC
Updated: June 17, 2026 at 08:12 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c Add error pointer check after calling otx2_mbox_get_rsp().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.12 ≤ v < 5.15.1745.12 ≤ v < 6.1.1205.12 ≤ v < 6.11.115.12 ≤ v < 6.12.25.12 ≤ v < 6.135.12 ≤ v < 6.6.645.16 ≤ v < 6.1.1206.12 ≤ v < 6.12.26.2 ≤ v < 6.6.646.7 ≤ v < 6.11.115.12ab58a416c93f134b72ec7e10d8d74509c3985243
Vendor states this is fixed in 0fbc7a5027c6f7f2c785adae3dcec22b2f2b69b3 (fixed)
Vendor states this is fixed in 4b88b202cf1ae79159a94fff9500f9be31559235 (fixed)
Vendor states this is fixed in 52c63a6a27d3178fab533fcfb4baa2ed5b8608a3 (fixed)
Vendor states this is fixed in 785c6758ea32aca73ba9331f7d902f7ce9a25757 (fixed)
Vendor states this is fixed in 9265b6ee754226f61bd122ec57141a781d4e0dcb (fixed)
Vendor states this is fixed in d4d5139d280f5837f16d116614c05c2b4eeaf28f (fixed)
Vendor states this is fixed in 5.12 (unaffected)
Vendor states this is fixed in 5.15.174 (unaffected)
Vendor states this is fixed in 6.1.120 (unaffected)
Vendor states this is fixed in 6.11.11 (unaffected)
Vendor states this is fixed in 6.12.2 (unaffected)
Vendor states this is fixed in 6.13 (unaffected)
Vendor states this is fixed in 6.6.64 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0fbc7a5027c6f7f2c785adae3dcec22b2f2b69b3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4b88b202cf1ae79159a94fff9500f9be31559235
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/52c63a6a27d3178fab533fcfb4baa2ed5b8608a3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/785c6758ea32aca73ba9331f7d902f7ce9a25757
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9265b6ee754226f61bd122ec57141a781d4e0dcb
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d4d5139d280f5837f16d116614c05c2b4eeaf28f
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card