| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2024122924-CVE-2024-56726-3a9e@gregkh> Date: Sun, 29 Dec 2024 12:29:27 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Description =========== In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Add error pointer check after calling otx2_mbox_get_rsp(). The Linux kernel CVE team has assigned CVE-2024-56726 to this issue. Affected and fixed versions =========================== Issue introduced in 5.14 with commit 2ca89a2c37527221edc549ffd3b65c6f8d9d4088 and fixed in 5.15.174 with commit a374e7e79fbdd7574bd89344447b0d4b91ba9801 Issue introduced in 5.14 with commit 2ca89a2c37527221edc549ffd3b65c6f8d9d4088 and fixed in 6.1.120 with commit 856ad633e11869729be698df2287ecfe6ec31f27 Issue introduced in 5.14 with commit 2ca89a2c37527221edc549ffd3b65c6f8d9d4088 and fixed in 6.6.64 with commit c5a6c5af434671aea739a5a41c849819144f02c9 Issue introduced in 5.14 with commit 2ca89a2c37527221edc549ffd3b65c6f8d9d4088 and fixed in 6.11.11 with commit 41f39f4c67253f802809310be6846ff408c3c758 Issue introduced in 5.14 with commit 2ca89a2c37527221edc549ffd3b65c6f8d9d4088 and fixed in 6.12.2 with commit 54abcec092616a4d01195355eb5d6036fb8fe363 Issue introduced in 5.14 with commit 2ca89a2c37527221edc549ffd3b65c6f8d9d4088 and fixed in 6.13-rc1 with commit ac9183023b6a9c09467516abd8aab04f9a2f9564 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-56726 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/ethernet/marvell/octeontx2/nic/cn10k.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/a374e7e79fbdd7574bd89344447b0d4b91ba9801 https://git.kernel.org/stable/c/856ad633e11869729be698df2287ecfe6ec31f27 https://git.kernel.org/stable/c/c5a6c5af434671aea739a5a41c849819144f02c9 https://git.kernel.org/stable/c/41f39f4c67253f802809310be6846ff408c3c758 https://git.kernel.org/stable/c/54abcec092616a4d01195355eb5d6036fb8fe363 https://git.kernel.org/stable/c/ac9183023b6a9c09467516abd8aab04f9a2f9564
Powered by blists - more mailing lists