CVE-2024-56727

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

State: Published
Severity: 5.5 Medium
Published: Dec 29, 2024
Updated: Jun 1, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

Adding error pointer check after calling otx2_mbox_get_rsp().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	f0a1913f8a6f947531c3042f9d6524946e661b57 to before e3c4e78d636e6dbd8ed72e41b311de2bb7e0b699Affected f0a1913f8a6f947531c3042f9d6524946e661b57 to before 8c9f8b35dc3d4ad8053a72bc0c5a7843591f6b75Affected f0a1913f8a6f947531c3042f9d6524946e661b57 to before c4eae7bac880edd88aaed6a8ec2997fa85e259c7Affected f0a1913f8a6f947531c3042f9d6524946e661b57 to before a479b3d7586e6f77f8337bbcac980eaf2d0a4029Affected f0a1913f8a6f947531c3042f9d6524946e661b57 to before e5e60f17d2462ef5c13db4d1a54eef5778fd2295Affected f0a1913f8a6f947531c3042f9d6524946e661b57 to before bd3110bc102ab6292656b8118be819faa0de8dd0Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.209 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

f0a1913f8a6f947531c3042f9d6524946e661b57 to before e3c4e78d636e6dbd8ed72e41b311de2bb7e0b699Affected
f0a1913f8a6f947531c3042f9d6524946e661b57 to before 8c9f8b35dc3d4ad8053a72bc0c5a7843591f6b75Affected
f0a1913f8a6f947531c3042f9d6524946e661b57 to before c4eae7bac880edd88aaed6a8ec2997fa85e259c7Affected
f0a1913f8a6f947531c3042f9d6524946e661b57 to before a479b3d7586e6f77f8337bbcac980eaf2d0a4029Affected
f0a1913f8a6f947531c3042f9d6524946e661b57 to before e5e60f17d2462ef5c13db4d1a54eef5778fd2295Affected
f0a1913f8a6f947531c3042f9d6524946e661b57 to before bd3110bc102ab6292656b8118be819faa0de8dd0Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.209 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.