CVE-2024-56660
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 27, 2024
Updated: Jan 6, 2025
CWE ID 476
Summary
CVE-2024-56660 is a vulnerability in the Linux kernel that affects the net/mlx5 module. The issue lies in the dr_domain_add_vport_cap() function, which sometimes returns an error indicator that is mistakenly treated as a valid pointer. Specifically, this function may return an error code of -ENOMEM instead of the expected -EBUSY, causing a potential error pointer dereference. This vulnerability could result in unintended behavior or system instability if exploited. The Linux kernel team has addressed this issue in a recent patch release.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.