CVE-2023-54129

A flaw was found in the octeontx2-af network driver within the Linux kernel where insufficient validation of the lmac_type_id field from firmware during a physical link change can result in a kernel panic. Firmware may report an invalid lmac_type_id, and because the kernel previously derived an internal lmac_type without verifying that the identifier was within a valid range, this can lead to corrupt state and an internal Oops condition.

This vulnerability is rated as Moderate because exploitation is restricted to systems utilizing specialized Marvell OcteonTX2 network hardware and results exclusively in a denial of service. The defect occurs during physical link state transitions when firmware supplies an unexpected interface type identifier that exceeds expected boundaries, triggering a kernel crash rather than permitting arbitrary code execution or data leakage. Standard Red Hat Enterprise Linux deployments lacking this specific network silicon are not exposed to the condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.