SB20241230299 - Input validation error in Linux kernel octeontx2 nic driver
Published: December 30, 2024 Updated: May 11, 2025
Security Bulletin ID
SB20241230299
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2024-56679)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the otx2_get_max_mtu() function in drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0fbc7a5027c6f7f2c785adae3dcec22b2f2b69b3
- https://git.kernel.org/stable/c/4b88b202cf1ae79159a94fff9500f9be31559235
- https://git.kernel.org/stable/c/52c63a6a27d3178fab533fcfb4baa2ed5b8608a3
- https://git.kernel.org/stable/c/785c6758ea32aca73ba9331f7d902f7ce9a25757
- https://git.kernel.org/stable/c/9265b6ee754226f61bd122ec57141a781d4e0dcb
- https://git.kernel.org/stable/c/d4d5139d280f5837f16d116614c05c2b4eeaf28f
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.2