Log in Start free

Vulnerability · Published Dec 29, 2024 · Assigned by Linux

CVE-2024-56727octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 88.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c Adding error pointer check after calling otx2_mbox_get_rsp().

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.123-1DEBIAN-CVE-2024-56727
Debian:13linux6.12.3-1DEBIAN-CVE-2024-56727
Debian:14linux6.12.3-1DEBIAN-CVE-2024-56727
Ubuntu:22.04:LTSlinux5.15.0-186.196UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux5.15.0-186.196USN-8575-1
Ubuntu:24.04:LTSlinux6.8.0-58.60UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-aws5.15.0-1112.119UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-aws5.15.0-1112.119USN-8575-2
Ubuntu:24.04:LTSlinux-aws6.8.0-1027.29UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1027.29~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure5.15.0-1117.126USN-8575-3
Ubuntu:22.04:LTSlinux-azure5.15.0-1117.126UBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-azure6.8.0-1027.32UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1012.12~24.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1027.32~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1117.126UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1117.126USN-8610-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1014.15UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gcp5.15.0-1112.122UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gcp5.15.0-1112.122USN-8575-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1028.30UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1011.11~24.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1028.30~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gke5.15.0-1108.114UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gke5.15.0-1108.114USN-8575-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1023.27UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1095.103UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1095.103USN-8575-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1010.12UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-58.60~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-ibm5.15.0-1106.110UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-ibm5.15.0-1106.110USN-8575-2
Ubuntu:24.04:LTSlinux-ibm6.8.0-1024.24UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1024.24~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1107.113UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1107.113USN-8620-4
Ubuntu:22.04:LTSlinux-kvm5.15.0-1104.109UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-kvm5.15.0-1104.109USN-8575-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-184.194UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-184.194USN-8575-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-58.60.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-58.60.1~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1107.108UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1107.108USN-8575-2
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1026.29UBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1026.29~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1026.29.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1064.66UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1064.66USN-8576-2
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1053.53UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1053.53USN-8576-2
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1015.15UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1026.26UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-oracle5.15.0-1109.115USN-8575-3
Ubuntu:22.04:LTSlinux-oracle5.15.0-1109.115UBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-oracle6.8.0-1024.25UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1024.25~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-raspi5.15.0-1106.109USN-8668-2
Ubuntu:22.04:LTSlinux-raspi5.15.0-1106.109UBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-raspi6.8.0-1028.32UBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-riscv6.8.0-58.60.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-58.60.1~22.04.1UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-56727
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2024-56727
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1075.79USN-8575-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1075.79UBUNTU-CVE-2024-56727

Affected products (as reported)

VendorProductVersions
Linux Linux f0a1913f8a6f947531c3042f9d6524946e661b57 – before e3c4e78d636e6dbd8ed72e41b311de2bb7e0b699f0a1913f8a6f947531c3042f9d6524946e661b57 – before 8c9f8b35dc3d4ad8053a72bc0c5a7843591f6b75f0a1913f8a6f947531c3042f9d6524946e661b57 – before c4eae7bac880edd88aaed6a8ec2997fa85e259c7f0a1913f8a6f947531c3042f9d6524946e661b57 – before a479b3d7586e6f77f8337bbcac980eaf2d0a4029f0a1913f8a6f947531c3042f9d6524946e661b57 – before e5e60f17d2462ef5c13db4d1a54eef5778fd2295f0a1913f8a6f947531c3042f9d6524946e661b57 – before bd3110bc102ab6292656b8118be819faa0de8dd0
Linux Linux 5.11

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References