CVE-2024-56742

Summary

In the Linux kernel, the following vulnerability has been resolved:

vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

Fix an unwind issue in mlx5vf_add_migration_pages().

If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak.

Any pages successfully added to the SG table will be freed as part of mlx5vf_free_data_buffer().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux6fadb021266d03c5fd7bca2cfa1607efd246dad1 < 769fe4ce444b646b0bf6ac308de80686c730c7dfaffected
LinuxLinux6fadb021266d03c5fd7bca2cfa1607efd246dad1 < c44f1b2ddfa81c8d7f8e9b6bc76c427bc00e69d5affected
LinuxLinux6fadb021266d03c5fd7bca2cfa1607efd246dad1 < 22e87bf3f77c18f5982c19ffe2732ef0c7a25f16affected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References