CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: DR, prevent potential error pointer dereference
The drdomainaddvportcap() function generally returns NULL on error but sometimes we want it to return ERRPTR(-EBUSY) so the caller can retry. The problem here is that "ret" can be either -EBUSY or -ENOMEM and if it's and -ENOMEM then the error pointer is propogated back and eventually dereferenced in drstev0buildsrcgvmiqpntag().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56660?
CVE-2024-56660 has a medium severity level as it involves a potential error pointer dereference in the Linux kernel.
How do I fix CVE-2024-56660?
To fix CVE-2024-56660, update the Linux kernel to a patched version that addresses the vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-56660?
CVE-2024-56660 affects Linux kernel versions from 5.16 up to 6.1.121 and versions between 6.2 and 6.6.67, as well as certain release candidates.
What is the potential impact of CVE-2024-56660 on systems?
The impact of CVE-2024-56660 could include system instability or security risks due to unhandled error pointers.
Is CVE-2024-56660 related to specific hardware or software configurations?
CVE-2024-56660 is related to the Linux kernel and may affect systems utilizing specific network drivers such as mlx5.