PT-2024-37038 · Linux+6 · Linux Kernel+6

Published 2024-10-17 · Updated 2025-10-03 · CVE-2024-56725

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns error handling in the Linux kernel, specifically with octeontx2-pf in the file otx2 dcbnl.c. It involves managing errors related to otx2 mbox get rsp. To address this, an error pointer check has been added after calling otx2 mbox get rsp().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-17893

ALT-PU-2025-12647

AZL-55289

BDU:2025-04131

CVE-2024-56725

DLA-4076-1

OESA-2025-1286

OESA-2025-1450

OPENSUSE-SU-2025_0428-1

OPENSUSE-SU-2025_0499-1

OPENSUSE-SU-2025_0557-1

SUSE-SU-2025:0428-1

SUSE-SU-2025:0499-1

SUSE-SU-2025:0557-1

SUSE-SU-2025:0564-1

SUSE-SU-2025:20165-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20248-1

SUSE-SU-2025:20249-1

SUSE-SU-2025_0428-1

SUSE-SU-2025_0499-1

SUSE-SU-2025_0557-1

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2736

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56725.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56603 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-56725 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56620 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53103 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56780 · Vendor Advisory