net/mlx5e: Fix CT entry update leaks of modify header context (Linux Linux)

CVE-2024-43864
CRITICAL 9.8

At a glance

Source
NVD
EPSS
EPSS 0.47 % · percentile 40 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit allocates a new modify header to replace the old one when updating CT entry. But if failed to allocate a new one, eg. exceed the max number firmware can support, modify header will be an error pointer that will trigger a panic when deallocating it. And the old modify header point is copied to old attr. When the old attr is freed, the old modify header is lost. Fix it by restoring the old attr to attr when failed to allocate a new modify header context. So when the CT entry is freed, the right modify header context will be freed. And the panic of accessing error pointer is also fixed.

Weaknesses (CWE)

References

Scores

VersionScoreVectorScored by
CVSS 3.1CRITICAL 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1CRITICAL 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 94ceffb48eac7692677d8093dcde6965b70c4b35 < daab2cc17b6b6ab158566bba037e9551fd432b59 ; affected 94ceffb48eac7692677d8093dcde6965b70c4b35 < 89064d09c56b44c668509bf793c410484f63f5ad ; affected 94ceffb48eac7692677d8093dcde6965b70c4b35 < 025f2b85a5e5a46df14ecf162c3c80a957a36d0b
Linux · Linuxaffected 6.3 ; unaffected 0 < 6.3 ; unaffected 6.6.45 ≤ 6.6.* ; unaffected 6.10.4 ≤ 6.10.* ; unaffected 6.11 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD