CVE-2023-54129
octeontx2-af: Add validation for lmac type
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmac_type_id, etc. Kernel derives lmac_type based on lmac_type_id received from firmware. In a few scenarios, firmware returns an invalid lmac_type_id, which is resulting in below kernel panic. This patch adds the missing validation of the lmac_type_id field. Internal error: Oops: 96000005 [#1] PREEMPT SMP [ 35.321595] Modules linked in: [ 35.328982] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 5.4.210-g2e3169d8e1bc-dirty #17 [ 35.337014] Hardware name: Marvell CN103XX board (DT) [ 35.344297] Workqueue: events work_for_cpu_fn [ 35.352730] pstate: 40400089 (nZcv daIf +PAN -UAO) [ 35.360267] pc : strncpy+0x10/0x30 [ 35.366595] lr : cgx_link_change_handler+0x90/0x180
Timeline
ID reserved
By Linux
Published
- 7 months later
· 7 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.1 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
| NVDNVD · Deferred | 3.1 | High7.1 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.29% · top 78% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Affected products
- affected 61071a871ea6eb2125ece91c1a0dbb124a318c8a – < 4392454c694b13d78c84165c0964729772cd3b73
- affected 61071a871ea6eb2125ece91c1a0dbb124a318c8a – < 83a7f27c5b94e43f29f8216a32790751139aa61e
- affected 61071a871ea6eb2125ece91c1a0dbb124a318c8a – < afd7660c766c4d317feae004e5cd829390bbc4b0
- affected 61071a871ea6eb2125ece91c1a0dbb124a318c8a – < 5c0268b141ad612b6fca13d3a66cfda111716dbb
- affected 61071a871ea6eb2125ece91c1a0dbb124a318c8a – < cb5edce271764524b88b1a6866b3e626686d9a33
- affected 4.20
- unaffected < 4.20
- unaffected 5.10.259 – ≤ 5.10.*
- unaffected 6.1.32 – ≤ 6.1.*
- unaffected 6.2.16 – ≤ 6.2.*
- unaffected 6.3.3 – ≤ 6.3.*
- unaffected 6.4 – ≤ *
References (5)
- https://git.kernel.org/stable/c/4392454c694b13d78c84165c0964729772cd3b73 (opens in a new tab)
- https://git.kernel.org/stable/c/83a7f27c5b94e43f29f8216a32790751139aa61e (opens in a new tab)
- https://git.kernel.org/stable/c/afd7660c766c4d317feae004e5cd829390bbc4b0 (opens in a new tab)
- https://git.kernel.org/stable/c/5c0268b141ad612b6fca13d3a66cfda111716dbb (opens in a new tab)
- https://git.kernel.org/stable/c/cb5edce271764524b88b1a6866b3e626686d9a33 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-54129)Record last updated .