CVE-2024-56660

MEDIUM EPSS 11.7%
Published Dec 27, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Dec 27, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() function generally returns NULL on error but sometimes we want it to return ERR_PTR(-EBUSY) so the caller can retry. The problem here is that "ret" can be either -EBUSY or -ENOMEM and if it's and -ENOMEM then the error pointer is propogated back and eventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
11.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.16  –  <6.1.121
linuxlinux_kernel*≥6.2  –  <6.6.67
linuxlinux_kernel*≥6.7  –  <6.12.6
linuxlinux_kernel6.13any
linuxlinux_kernel6.13any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/11776cff0b563c8b8a4fa76cab620bfb633a8cb8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/325cf73a1b449fea3158ab99d03a7a717aad1618
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/61f720e801443d4e2a3c0261eda4ad8431458dca
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a59c61a1869ceefc65ef02886f91e8cd0062211f
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/11776cff0b563c8b8a4fa76cab620bfb633a8cb8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/325cf73a1b449fea3158ab99d03a7a717aad1618
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/61f720e801443d4e2a3c0261eda4ad8431458dca
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a59c61a1869ceefc65ef02886f91e8cd0062211f
    Patch