PT-2024-37029 · Linux+5 · Linux Kernel+5

Published

2024-12-12

·

Updated

2026-05-26

·

CVE-2024-56717

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74
Description The issue is related to the net: mscc: ocelot: fix incorrect IFH SRC PORT field in ocelot ifh set basic() function. Packets injected by the CPU should have a SRC PORT field equal to the CPU port module index in the Analyzer block. The error used to be silent but now fails loudly due to new changes in the packing library. The code path pertains to the ocelot switchdev driver and the felix secondary DSA tag protocol, ocelot-8021q.
Recommendations To resolve the issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider disabling the ocelot ifh set basic() function until a patch is available. Restrict access to the vulnerable module net/dsa/tag ocelot.c to minimize the risk of exploitation. Avoid using the BIT ULL(x) function in the affected API endpoint until the issue is resolved.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALT-PU-2025-1256
ALT-PU-2025-12647
ALT-PU-2025-1288
ALT-PU-2025-1925
ALT-PU-2025-3483
ALT-PU-2025-3496
AZL-55437
BDU:2025-04132
CVE-2024-56717
DLA-4076-1
MGASA-2025-0030
MGASA-2025-0032
OESA-2025-1204
OESA-2025-1205
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7513-1
USN-7513-2
USN-7513-3
USN-7513-4
USN-7513-5
USN-7514-1
USN-7515-1
USN-7515-2
USN-7522-1
USN-7523-1
USN-7524-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu