Azure Linux 3.0 Security Update: kernel (CVE-2024-56717)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56717 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH...

CVE-2024-56717

CVE-2024-56717 affects the Linux kernel, specifically the net: mscc: ocelot driver. The vulnerability stems from an incorrect IFH SRC_PORT field in ocelot_ifh_set_basic(), where the code called with BIT_ULL(x) instead of the port index x. This caused the SRC_PORT to not correspond to the CPU port...