In the Linux kernel, the following vulnerability has been resolved:
net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv().
Fix this bug by adding a check of mlx4_en_copy_priv()
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_MLX4_EN=m show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Jul 9, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-azure-baseUpgrade ocfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dlm-kmp-rt | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-raspiUpgrade linux-fipsUpgrade linuxUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-hweUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-aws-fips | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub