In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map
Just simply reordering the functions mlx5e_ptp_metadata_map_put and mlx5e_ptpsq_track_metadata in the mlx5e_txwqe_complete context is not good enough since both the compiler and CPU are free to reorder these two functions. If reordering does occur, the issue that was supposedly fixed by 7e3f3ba97e6c ("net/mlx5e: Track xmit submission to PTP WQ after populating metadata map") will be seen. This will lead to NULL pointer dereferences in mlx5e_ptpsq_mark_ts_cqes_undelivered in the NAPI polling context due to the tracking list being populated before the metadata map.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-64k | Nov 4, 2024 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade bpftool-debuginfoUpgrade rvUpgrade kernel-rt-develUpgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-modulesUpgrade libperfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-modules-extra | Jul 29, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-azure | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub