In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum: Protect driver from buggy firmware
When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port (local port 0), which exists, but lacks a netdev.
This can result in a NULL pointer dereference when calling netif_carrier_{on,off}().
Fix this by bailing early when processing an event reported for the CPU port. Problem was only observed when running on top of a buggy emulator.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-devel | Sep 26, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headers | Dec 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64 | Oct 2, 2024 | May 24, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-macros | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub