CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-28 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c Add error pointer check after calling otx2_mbox_get_rsp().

Affected products

Linux kernel: from 5.12 before 5.15.174; from 5.16 before 6.1.120; from 6.2 before 6.6.64; from 6.7 before 6.11.11; from 6.12 before 6.12.2 — fixed in 5.15.174, 6.1.120, 6.11.11, 6.12.2, 6.6.64

How to fix

Upgrade to a fixed version: Linux kernel 5.15.174, 6.1.120, 6.11.11, 6.12.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0fbc7a5027c6f7f2c785adae3dcec22b2f2b69b3
https://git.kernel.org/stable/c/4b88b202cf1ae79159a94fff9500f9be31559235
https://git.kernel.org/stable/c/52c63a6a27d3178fab533fcfb4baa2ed5b8608a3
https://git.kernel.org/stable/c/785c6758ea32aca73ba9331f7d902f7ce9a25757
https://git.kernel.org/stable/c/9265b6ee754226f61bd122ec57141a781d4e0dcb
https://git.kernel.org/stable/c/d4d5139d280f5837f16d116614c05c2b4eeaf28f
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-56679 or the next vulnerability affects your stack