CVE-2024-56728

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

State: Published
Severity: 5.5 Medium
Published: Dec 29, 2024
Updated: May 11, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

Add error pointer check after calling otx2_mbox_get_rsp().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
LinuxLinux	75f36270990c7875c0091afb961ca37f52b6bc55 to before 5ff9de1f2712cbca53da2e37d831eea7ffcb43b6Affected 75f36270990c7875c0091afb961ca37f52b6bc55 to before 55c41b97001a09bb490ffa2e667e251d75d15ab1Affected 75f36270990c7875c0091afb961ca37f52b6bc55 to before 05a6ce174c0c724e5914e1e5efd826bab8f382b4Affected 75f36270990c7875c0091afb961ca37f52b6bc55 to before c0f64fd73b60aee85f88c270c9d714ead27a7b7aAffected 75f36270990c7875c0091afb961ca37f52b6bc55 to before 6cda142cee032b8fe65ee11f78721721c3988febAffected 75f36270990c7875c0091afb961ca37f52b6bc55 to before 2db2194727b1f49a5096c1c3981adef1b7638733Affected 75f36270990c7875c0091afb961ca37f52b6bc55 to before e26f8eac6bb20b20fdb8f7dc695711ebce4c7c5cAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

75f36270990c7875c0091afb961ca37f52b6bc55 to before 5ff9de1f2712cbca53da2e37d831eea7ffcb43b6Affected
75f36270990c7875c0091afb961ca37f52b6bc55 to before 55c41b97001a09bb490ffa2e667e251d75d15ab1Affected
75f36270990c7875c0091afb961ca37f52b6bc55 to before 05a6ce174c0c724e5914e1e5efd826bab8f382b4Affected
75f36270990c7875c0091afb961ca37f52b6bc55 to before c0f64fd73b60aee85f88c270c9d714ead27a7b7aAffected
75f36270990c7875c0091afb961ca37f52b6bc55 to before 6cda142cee032b8fe65ee11f78721721c3988febAffected
75f36270990c7875c0091afb961ca37f52b6bc55 to before 2db2194727b1f49a5096c1c3981adef1b7638733Affected
75f36270990c7875c0091afb961ca37f52b6bc55 to before e26f8eac6bb20b20fdb8f7dc695711ebce4c7c5cAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.