Linux Kernel CVE-2023-54129

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation for lmac type

Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmac_type_id, etc. Kernel derives lmac_type based on lmac_type_id received from firmware.

In a few scenarios, firmware returns an invalid lmac_type_id, which is resulting in below kernel panic. This patch adds the missing validation of the lmac_type_id field.

Internal error: Oops: 96000005 [#1] PREEMPT SMP [ 35.321595] Modules linked in: [ 35.328982] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 5.4.210-g2e3169d8e1bc-dirty #17 [ 35.337014] Hardware name: Marvell CN103XX board (DT) [ 35.344297] Workqueue: events work_for_cpu_fn [ 35.352730] pstate: 40400089 (nZcv daIf +PAN -UAO) [ 35.360267] pc : strncpy+0x10/0x30 [ 35.366595] lr : cgx_link_change_handler+0x90/0x180

The Linux kernel's octeontx2-af driver is affected on systems running Marvell OcteonTX2 (CN10xxx/CN9xxx series) hardware, including the CN103XX board explicitly named in the panic trace. Affected kernel versions are those shipping the cgx_link_change_handler function without lmac_type_id bounds validation. Five stable-tree patch commits were applied (4392454c694b, 5c0268b141ad, 83a7f27c5b94, afd7660c766c, cb5edce27176), indicating fixes were backported across multiple stable branches. Exact version ranges are not explicitly stated in available data and must be inferred from which stable series received these commits. Standard x86 and non-OcteonTX2 architectures are not affected.