Threats tagged 'ghsa-c7fp-8j89-w969'

CVE-2024-56717 is a medium-severity vulnerability in the Linux kernel's mscc ocelot driver. It involves an incorrect setting of the IFH SRC_PORT field in the ocelot_ifh_set_basic() function, where a port index was mistakenly treated as a port mask. This flaw caused packet injection by the CPU to use an incorrect source port value, leading to errors and timeouts in packet transmission. The issue was silent previously but became apparent with recent changes in the packing library, causing kernel warnings and transmission failures. The vulnerability affects the ocelot switchdev driver and the felix secondary DSA tag protocol (ocelot-8021q).