In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error.
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq().
kmemleak complains on:
unreferenced object 0xc000000038625100 (size 64): comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s) hex dump (first 32 bytes): 60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4..... 02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}..... backtrace: [<000000009e8643cb>] add_res_tree+0xd0/0x270 [mlx5_core] [<00000000e7cb8e6c>] mlx5_debug_cq_add+0x5c/0xc0 [mlx5_core] [<000000002a12918f>] mlx5_core_create_cq+0x1d0/0x2d0 [mlx5_core] [<00000000cef0a696>] mlx5e_create_cq+0x210/0x3f0 [mlx5_core] [<000000009c642c26>] mlx5e_open_cq+0xb4/0x130 [mlx5_core] [<0000000058dfa578>] mlx5e_ptp_open+0x7f4/0xe10 [mlx5_core] [<0000000081839561>] mlx5e_open_channels+0x9cc/0x13e0 [mlx5_core] [<0000000009cf05d4>] mlx5e_switch_priv_channels+0xa4/0x230 [mlx5_core] [<0000000042bbedd8>] mlx5e_safe_switch_params+0x14c/0x300 [mlx5_core] [<0000000004bc9db8>] set_pflag_tx_port_ts+0x9c/0x160 [mlx5_core] [<00000000a0553443>] mlx5e_set_priv_flags+0xd0/0x1b0 [mlx5_core] [<00000000a8f3d84b>] ethnl_set_privflags+0x234/0x2d0 [<00000000fd27f27c>] genl_family_rcv_msg_doit+0x108/0x1d0 [<00000000f495e2bb>] genl_family_rcv_msg+0xe4/0x1f0 [<00000000646c5c2c>] genl_rcv_msg+0x78/0x120 [<00000000d53e384e>] netlink_rcv_skb+0x74/0x1a0
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-devel | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-sprd | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub