In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Clear port select structure when fail to create
Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5_lag_destroy_definers() always try to destroy all lag definers in the tt_map, so in the flow below lag definers get double-destroyed and cause kernel crash:
mlx5_lag_port_sel_create() mlx5_lag_create_definers() mlx5_lag_create_definer() <- Failed on tt 1 mlx5_lag_destroy_definers() <- definers[tt=0] gets destroyed mlx5_lag_port_sel_create() mlx5_lag_create_definers() mlx5_lag_create_definer() <- Failed on tt 0 mlx5_lag_destroy_definers() <- definers[tt=0] gets double-destroyed
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 user pgtable: 64k pages, 48-bit VAs, pgdp=0000000112ce2e00 [0000000000000008] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Modules linked in: iptable_raw bonding ip_gre ip6_gre gre ip6_tunnel tunnel6 geneve ip6_udp_tunnel udp_tunnel ipip tunnel4 ip_tunnel rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) ib_uverbs(OE) mlx5_fwctl(OE) fwctl(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlxfw(OE) memtrack(OE) mlx_compat(OE) openvswitch nsh nf_conncount psample xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 br_netfilter bridge stp llc netconsole overlay efi_pstore sch_fq_codel zram ip_tables crct10dif_ce qemu_fw_cfg fuse ipv6 crc_ccitt [last unloaded: mlx_compat(OE)] CPU: 3 UID: 0 PID: 217 Comm: kworker/u53:2 Tainted: G OE 6.11.0+ #2 Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Workqueue: mlx5_lag mlx5_do_bond_work [mlx5_core] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : mlx5_del_flow_rules+0x24/0x2c0 [mlx5_core] lr : mlx5_lag_destroy_definer+0x54/0x100 [mlx5_core] sp : ffff800085fafb00 x29: ffff800085fafb00 x28: ffff0000da0c8000 x27: 0000000000000000 x26: ffff0000da0c8000 x25: ffff0000da0c8000 x24: ffff0000da0c8000 x23: ffff0000c31f81a0 x22: 0400000000000000 x21: ffff0000da0c8000 x20: 0000000000000000 x19: 0000000000000001 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffff8b0c9350 x14: 0000000000000000 x13: ffff800081390d18 x12: ffff800081dc3cc0 x11: 0000000000000001 x10: 0000000000000b10 x9 : ffff80007ab7304c x8 : ffff0000d00711f0 x7 : 0000000000000004 x6 : 0000000000000190 x5 : ffff00027edb3010 x4 : 0000000000000000 x3 : 0000000000000000 x2 : ffff0000d39b8000 x1 : ffff0000d39b8000 x0 : 0400000000000000 Call trace: mlx5_del_flow_rules+0x24/0x2c0 [mlx5_core] mlx5_lag_destroy_definer+0x54/0x100 [mlx5_core] mlx5_lag_destroy_definers+0xa0/0x108 [mlx5_core] mlx5_lag_port_sel_create+0x2d4/0x6f8 [mlx5_core] mlx5_activate_lag+0x60c/0x6f8 [mlx5_core] mlx5_do_bond_work+0x284/0x5c8 [mlx5_core] process_one_work+0x170/0x3e0 worker_thread+0x2d8/0x3e0 kthread+0x11c/0x128 ret_from_fork+0x10/0x20 Code: a9025bf5 aa0003f6 a90363f7 f90023f9 (f9400400) ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfo | Mar 27, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-default-devel | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1030-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1020-oemUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-generic-lpae | Apr 24, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub