CVE-2024-56707
octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
MEDIUM
5.5
CVSS Score
Published: December 28, 2024 at 09:46 AM UTC
Updated: June 17, 2026 at 08:12 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c Add error pointer checks after calling otx2_mbox_get_rsp().
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.14 ≤ v < 6.1.1205.14 ≤ v < 6.11.115.14 ≤ v < 6.12.25.14 ≤ v < 6.135.14 ≤ v < 6.6.645.14.1 ≤ v < 6.1.1206.12 ≤ v < 6.12.26.2 ≤ v < 6.6.646.7 ≤ v < 6.11.115.145.14 rc25.14 rc35.14 rc45.14 rc55.14 rc65.14 rc779d2be385e9eabe4403eb85bcc7d3efc6b936a76
Vendor states this is fixed in 1611b1ea7cf8d07dff091a45389b10401bb6d5b3 (fixed)
Vendor states this is fixed in 20e06a5137a1174214bae3a29ce623e69455ee0f (fixed)
Vendor states this is fixed in 3ccbc7a518868eff1d5a198b9e454e182b651e00 (fixed)
Vendor states this is fixed in f5b942e6c54b13246ee49d42dcfb71b7f29e3c64 (fixed)
Vendor states this is fixed in fc595472fbad96533ccbb7b9ebb82b743ec26829 (fixed)
Vendor states this is fixed in 5.14 (unaffected)
Vendor states this is fixed in 6.1.120 (unaffected)
Vendor states this is fixed in 6.11.11 (unaffected)
Vendor states this is fixed in 6.12.2 (unaffected)
Vendor states this is fixed in 6.13 (unaffected)
Vendor states this is fixed in 6.6.64 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/1611b1ea7cf8d07dff091a45389b10401bb6d5b3
- https://git.kernel.org/stable/c/20e06a5137a1174214bae3a29ce623e69455ee0f
- https://git.kernel.org/stable/c/3ccbc7a518868eff1d5a198b9e454e182b651e00
- https://git.kernel.org/stable/c/f5b942e6c54b13246ee49d42dcfb71b7f29e3c64
- https://git.kernel.org/stable/c/fc595472fbad96533ccbb7b9ebb82b743ec26829
References (6)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1611b1ea7cf8d07dff091a45389b10401bb6d5b3Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/20e06a5137a1174214bae3a29ce623e69455ee0fPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3ccbc7a518868eff1d5a198b9e454e182b651e00Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f5b942e6c54b13246ee49d42dcfb71b7f29e3c64Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fc595472fbad96533ccbb7b9ebb82b743ec26829Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.htmlCVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card