CVE-2023-54129
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability has been identified in the Linux kernel related to the validation of lmac type in the octeontx2-af module. Upon physical link change, the firmware may return an invalid lmac_type_id, leading to kernel panic.
Risk Assessment
This vulnerability may lead to system crashes, affecting service availability and infrastructure stability. In the event of a kernel panic, the system may require a reboot.
Recommendation
It is recommended to update the Linux kernel to a version that includes the patch adding validation for the lmac_type_id field. Systems should be monitored for potential issues related to this vulnerability.
Other vulnerabilities in Linux kernel, octeontx2-af module
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmac_type_id, etc. Kernel derives lmac_type based on lmac_type_id received from firmware. In a few scenarios, firmware returns an invalid lmac_type_id, which is resulting in below kernel panic. This patch adds the missing validation of the lmac_type_id field. Internal error: Oops: 96000005 [#1] PREEMPT SMP [ 35.321595] Modules linked in: [ 35.328982] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 5.4.210-g2e3169d8e1bc-dirty #17 [ 35.337014] Hardware name: Marvell CN103XX board (DT) [ 35.344297] Workqueue: events work_for_cpu_fn [ 35.352730] pstate: 40400089 (nZcv daIf +PAN -UAO) [ 35.360267] pc : strncpy+0x10/0x30 [ 35.366595] lr : cgx_link_change_handler+0x90/0x180