PT-2024-36970 · Linux+6 · Linux Kernel+6
Published
2024-12-04
·
Updated
2026-05-26
·
CVE-2024-56660
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue concerns a potential error pointer dereference in the Linux kernel, specifically in the net/mlx5: DR component. The
dr domain add vport cap() function generally returns NULL on error but sometimes returns ERR PTR(-EBUSY) to allow the caller to retry. However, if the return value is -ENOMEM, the error pointer is propagated back and eventually dereferenced in dr ste v0 build src gvmi qpn tag(). This could lead to a potential error.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider restricting access to the
dr domain add vport cap() function until a patch is available. Additionally, avoid using the ret variable in the affected dr ste v0 build src gvmi qpn tag() function until the issue is resolved.Exploit
Fix
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu