In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error.
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq().
kmemleak complains on:
unreferenced object 0xc000000038625100 (size 64): comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s) hex dump (first 32 bytes): 60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4..... 02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}..... backtrace: [<000000009e8643cb>] add_res_tree+0xd0/0x270 [mlx5_core] [<00000000e7cb8e6c>] mlx5_debug_cq_add+0x5c/0xc0 [mlx5_core] [<000000002a12918f>] mlx5_core_create_cq+0x1d0/0x2d0 [mlx5_core] [<00000000cef0a696>] mlx5e_create_cq+0x210/0x3f0 [mlx5_core] [<000000009c642c26>] mlx5e_open_cq+0xb4/0x130 [mlx5_core] [<0000000058dfa578>] mlx5e_ptp_open+0x7f4/0xe10 [mlx5_core] [<0000000081839561>] mlx5e_open_channels+0x9cc/0x13e0 [mlx5_core] [<0000000009cf05d4>] mlx5e_switch_priv_channels+0xa4/0x230 [mlx5_core] [<0000000042bbedd8>] mlx5e_safe_switch_params+0x14c/0x300 [mlx5_core] [<0000000004bc9db8>] set_pflag_tx_port_ts+0x9c/0x160 [mlx5_core] [<00000000a0553443>] mlx5e_set_priv_flags+0xd0/0x1b0 [mlx5_core] [<00000000a8f3d84b>] ethnl_set_privflags+0x234/0x2d0 [<00000000fd27f27c>] genl_family_rcv_msg_doit+0x108/0x1d0 [<00000000f495e2bb>] genl_family_rcv_msg+0xe4/0x1f0 [<00000000646c5c2c>] genl_rcv_msg+0x78/0x120 [<00000000d53e384e>] netlink_rcv_skb+0x74/0x1a0
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dtb-nvidia | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub