Kernel Vulnerability in Linux Affects OcteonTX2 Products

CVE-2024-56727

Summary

A vulnerability exists in the Linux kernel impacting the OcteonTX2 platform, specifically related to error handling in the otx2_flows.c module. The issue arises from the otx2_mbox_get_rsp function, where failure to handle error pointers correctly could lead to undefined behavior and potential system stability issues. This vulnerability has been addressed by adding appropriate error pointer checks post-calling otx2_mbox_get_rsp(). Users of affected products are advised to ensure their systems are updated to mitigate any possible impact.

References