Wind River Support Network

HomeDefectsLIN1023-9897
Fixed

LIN1023-9897 : Security Advisory - linux - CVE-2024-56660

Created: Dec 27, 2024    Updated: Feb 19, 2025
Resolved Date: Feb 7, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.15
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: DR, prevent potential error pointer dereference

The dr_domain_add_vport_cap() function generally returns NULL on error
but sometimes we want it to return ERR_PTR(-EBUSY) so the caller can
retry.  The problem here is that "ret" can be either -EBUSY or -ENOMEM
and if it's and -ENOMEM then the error pointer is propogated back and
eventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().

CREATE(Triage):(User=admin) CVE-2024-56660 (https://nvd.nist.gov/vuln/detail/CVE-2024-56660)

CVEs


Live chat
Online