CVE-2023-54129
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
octeontx2-af: Add validation for lmac type
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmac_type_id, etc. Kernel derives lmac_type based on lmac_type_id received from firmware. In a few scenarios, firmware returns an invalid lmac_type_id, which is resulting in below kernel panic. This patch adds the missing validation of the lmac_type_id field. Internal error: Oops: 96000005 [#1] PREEMPT SMP [ 35.321595] Modules linked in: [ 35.328982] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 5.4.210-g2e3169d8e1bc-dirty #17 [ 35.337014] Hardware name: Marvell CN103XX board (DT) [ 35.344297] Workqueue: events work_for_cpu_fn [ 35.352730] pstate: 40400089 (nZcv daIf +PAN -UAO) [ 35.360267] pc : strncpy+0x10/0x30 [ 35.366595] lr : cgx_link_change_handler+0x90/0x180
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 61071a871ea6eb2125ece91c1a0dbb124a318c8a | affected | git | 4392454c694b13d78c84165c0964729772cd3b73 | Unavailable | None listed |
| 61071a871ea6eb2125ece91c1a0dbb124a318c8a | affected | git | 83a7f27c5b94e43f29f8216a32790751139aa61e | Unavailable | None listed |
| 61071a871ea6eb2125ece91c1a0dbb124a318c8a | affected | git | afd7660c766c4d317feae004e5cd829390bbc4b0 | Unavailable | None listed |
| 61071a871ea6eb2125ece91c1a0dbb124a318c8a | affected | git | 5c0268b141ad612b6fca13d3a66cfda111716dbb | Unavailable | None listed |
| 61071a871ea6eb2125ece91c1a0dbb124a318c8a | affected | git | cb5edce271764524b88b1a6866b3e626686d9a33 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.20 | Unavailable | None listed |
| 5.10.259 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 6.1.32 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2.16 | unaffected | semver | Unavailable | 6.2.* | None listed |
| 6.3.3 | unaffected | semver | Unavailable | 6.3.* | None listed |
| 6.4 | unaffected | original_commit_for_fix | Unavailable | * | None listed |