---
id: CVE-2024-56742
title: 'vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

  Fix an unwind issue in mlx5vf_add_migration_pages().

  If a set of pages is allocated but fails to be add…
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
cvssSource: adp
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 <
    549384162ed7e84bdefa004b589215d18b0190c5
  - >-
    Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 <
    465e06ffbb681f6fe34ca3aeba4b609677c3d4c1
  - >-
    Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 <
    769fe4ce444b646b0bf6ac308de80686c730c7df
  - >-
    Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 <
    c44f1b2ddfa81c8d7f8e9b6bc76c427bc00e69d5
  - >-
    Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 <
    22e87bf3f77c18f5982c19ffe2732ef0c7a25f16
  - Linux 5.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-04-17T20:10:22.255813Z'
published: '2024-12-29'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:20:28.869Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-56742'
references:
  - url: 'https://git.kernel.org/stable/c/549384162ed7e84bdefa004b589215d18b0190c5'
  - url: 'https://git.kernel.org/stable/c/465e06ffbb681f6fe34ca3aeba4b609677c3d4c1'
  - url: 'https://git.kernel.org/stable/c/769fe4ce444b646b0bf6ac308de80686c730c7df'
  - url: 'https://git.kernel.org/stable/c/c44f1b2ddfa81c8d7f8e9b6bc76c427bc00e69d5'
  - url: 'https://git.kernel.org/stable/c/22e87bf3f77c18f5982c19ffe2732ef0c7a25f16'
tags:
  - cve.org
epss: 0.0025
epssPercentile: 0.16453
ingestedAt: '2026-10-21T12:48:53.723Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

Fix an unwind issue in mlx5vf_add_migration_pages().

If a set of pages is allocated but fails to be added to the SG table,
they need to be freed to prevent a memory leak.

Any pages successfully added to the SG table will be freed as part of
mlx5vf_free_data_buffer().

## Affected

- `Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 < 549384162ed7e84bdefa004b589215d18b0190c5`
- `Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 < 465e06ffbb681f6fe34ca3aeba4b609677c3d4c1`
- `Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 < 769fe4ce444b646b0bf6ac308de80686c730c7df`
- `Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 < c44f1b2ddfa81c8d7f8e9b6bc76c427bc00e69d5`
- `Linux >= 6fadb021266d03c5fd7bca2cfa1607efd246dad1 < 22e87bf3f77c18f5982c19ffe2732ef0c7a25f16`
- `Linux 5.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.