CVE-2024-56715: ionic: Fix netdev notifier unregister on failure
In the Linux kernel, the following vulnerability has been resolved:
ionic: Fix netdev notifier unregister on failure
If registernetdev() fails, then the driver leaks the netdev notifier. Fix this by calling ioniclifunregister() on registernetdev() failure. This will also call ioniclifunregisterphc() if it has already been registered.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56715?
CVE-2024-56715 has a moderate severity due to the potential for resource leaks.
How do I fix CVE-2024-56715?
To fix CVE-2024-56715, ensure you update to the latest version of the affected Linux kernel releases as per the patch provided.
Which versions of the Linux kernel are affected by CVE-2024-56715?
CVE-2024-56715 affects Linux kernel versions between 5.10 and 5.15.176, 5.16 and 6.1.122, 6.2 and 6.6.68, 6.7 and 6.12.7, and specific RC versions 6.13-rc1 to 6.13-rc3.
What potential issues does CVE-2024-56715 introduce?
CVE-2024-56715 may lead to resource leaks if the netdev notifier is not properly unregistered during the failure of register_netdev().
Is CVE-2024-56715 specific to a particular operating system?
Yes, CVE-2024-56715 specifically affects the Linux kernel.