CVE-2024-56660

net/mlx5: DR, prevent potential error pointer dereference

State: Published
Severity: 5.5 Medium
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: DR, prevent potential error pointer dereference

The dr_domain_add_vport_cap() function generally returns NULL on error but sometimes we want it to return ERR_PTR(-EBUSY) so the caller can retry. The problem here is that "ret" can be either -EBUSY or -ENOMEM and if it's and -ENOMEM then the error pointer is propogated back and eventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	11a45def2e197532c46aa908dedd52bc1ee378a2 to before 61f720e801443d4e2a3c0261eda4ad8431458dcaAffected 11a45def2e197532c46aa908dedd52bc1ee378a2 to before 325cf73a1b449fea3158ab99d03a7a717aad1618Affected 11a45def2e197532c46aa908dedd52bc1ee378a2 to before a59c61a1869ceefc65ef02886f91e8cd0062211fAffected 11a45def2e197532c46aa908dedd52bc1ee378a2 to before 11776cff0b563c8b8a4fa76cab620bfb633a8cb8Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.121 through 6.1.Not affected 6.6.67 through 6.6.Not affected 6.12.6 through 6.12.*Not affected 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.