CVE-2023-54129

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmac_type_id, etc. Kernel derives lmac_type based on lmac_type_id received from firmware. In a few scenarios, firmware returns an invalid lmac_type_id, which is resulting in below kernel panic. This patch adds the missing validation of the lmac_type_id field. Internal error: Oops: 96000005 [#1] PREEMPT SMP [ 35.321595] Modules linked in: [ 35.328982] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 5.4.210-g2e3169d8e1bc-dirty #17 [ 35.337014] Hardware name: Marvell CN103XX board (DT) [ 35.344297] Workqueue: events work_for_cpu_fn [ 35.352730] pstate: 40400089 (nZcv daIf +PAN -UAO) [ 35.360267] pc : strncpy+0x10/0x30 [ 35.366595] lr : cgx_link_change_handler+0x90/0x180

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/4392454c694b13d78c84165c0964729772cd3b73
https://git.kernel.org/stable/c/5c0268b141ad612b6fca13d3a66cfda111716dbb
https://git.kernel.org/stable/c/83a7f27c5b94e43f29f8216a32790751139aa61e
https://git.kernel.org/stable/c/afd7660c766c4d317feae004e5cd829390bbc4b0
https://git.kernel.org/stable/c/cb5edce271764524b88b1a6866b3e626686d9a33

Configurations

No configuration.

History

19 Jun 2026, 13:16

Type	Values Removed	Values Added
References		() https://git.kernel.org/stable/c/4392454c694b13d78c84165c0964729772cd3b73 -

24 Dec 2025, 13:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-12-24 13:16

Updated : 2026-06-19 13:16

NVD link : CVE-2023-54129

Mitre link : CVE-2023-54129

CVE.ORG link : CVE-2023-54129

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-54129", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "61071a871ea6eb2125ece91c1a0dbb124a318c8a", "lessThan": "4392454c694b13d78c84165c0964729772cd3b73", "versionType": "git"}, {"status": "affected", "version": "61071a871ea6eb2125ece91c1a0dbb124a318c8a", "lessThan": "83a7f27c5b94e43f29f8216a32790751139aa61e", "versionType": "git"}, {"status": "affected", "version": "61071a871ea6eb2125ece91c1a0dbb124a318c8a", "lessThan": "afd7660c766c4d317feae004e5cd829390bbc4b0", "versionType": "git"}, {"status": "affected", "version": "61071a871ea6eb2125ece91c1a0dbb124a318c8a", "lessThan": "5c0268b141ad612b6fca13d3a66cfda111716dbb", "versionType": "git"}, {"status": "affected", "version": "61071a871ea6eb2125ece91c1a0dbb124a318c8a", "lessThan": "cb5edce271764524b88b1a6866b3e626686d9a33", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/marvell/octeontx2/af/cgx.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.20"}, {"status": "unaffected", "version": "0", "lessThan": "4.20", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.259", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "6.1.32", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.16", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3.3", "versionType": "semver", "lessThanOrEqual": "6.3.*"}, {"status": "unaffected", "version": "6.4", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/marvell/octeontx2/af/cgx.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T13:16:14.887", "references": [{"url": "https://git.kernel.org/stable/c/4392454c694b13d78c84165c0964729772cd3b73", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5c0268b141ad612b6fca13d3a66cfda111716dbb", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/83a7f27c5b94e43f29f8216a32790751139aa61e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/afd7660c766c4d317feae004e5cd829390bbc4b0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cb5edce271764524b88b1a6866b3e626686d9a33", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Add validation for lmac type\n\nUpon physical link change, firmware reports to the kernel about the\nchange along with the details like speed, lmac_type_id, etc.\nKernel derives lmac_type based on lmac_type_id received from firmware.\n\nIn a few scenarios, firmware returns an invalid lmac_type_id, which\nis resulting in below kernel panic. This patch adds the missing\nvalidation of the lmac_type_id field.\n\nInternal error: Oops: 96000005 [#1] PREEMPT SMP\n[ 35.321595] Modules linked in:\n[ 35.328982] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted\n5.4.210-g2e3169d8e1bc-dirty #17\n[ 35.337014] Hardware name: Marvell CN103XX board (DT)\n[ 35.344297] Workqueue: events work_for_cpu_fn\n[ 35.352730] pstate: 40400089 (nZcv daIf +PAN -UAO)\n[ 35.360267] pc : strncpy+0x10/0x30\n[ 35.366595] lr : cgx_link_change_handler+0x90/0x180"}], "lastModified": "2026-06-19T13:16:19.260", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}