What’s Vulnerable › Vulnerabilities

CVE-2024-56715: ionic: Fix netdev notifier unregister on failure

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-29 · updated 2026-08-04
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: ionic: Fix netdev notifier unregister on failure If register_netdev() fails, then the driver leaks the netdev notifier. Fix this by calling ionic_lif_unregister() on register_netdev() failure. This will also call ionic_lif_unregister_phc() if it has already been registered.

Affected products

• Linux kernel: from 5.10 before 5.15.176; from 5.16 before 6.1.122; from 6.2 before 6.6.68; from 6.7 before 6.12.7; 6.13-rc1, 6.13-rc2, 6.13-rc3 — fixed in 5.15.176, 6.1.122, 6.12.7, 6.6.68

How to fix

Upgrade to a fixed version: Linux kernel 5.15.176, 6.1.122, 6.12.7, 6.6.68. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/87847938f5708b2509b279369c96572254bcf2ba
• https://git.kernel.org/stable/c/9590d32e090ea2751e131ae5273859ca22f5ac14
• https://git.kernel.org/stable/c/da5736f516a664a9e1ff74902663c64c423045d2
• https://git.kernel.org/stable/c/da93a12876f8b969df7316dc93aac7e725f88252
• https://git.kernel.org/stable/c/ee2e931b2b46de9af7f681258e8ec8e2cd81cfc6
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Get alerted when CVE-2024-56715 or the next vulnerability affects your stack