In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error.
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq().
kmemleak complains on:
unreferenced object 0xc000000038625100 (size 64): comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s) hex dump (first 32 bytes): 60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4..... 02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}..... backtrace: [<000000009e8643cb>] add_res_tree+0xd0/0x270 [mlx5_core] [<00000000e7cb8e6c>] mlx5_debug_cq_add+0x5c/0xc0 [mlx5_core] [<000000002a12918f>] mlx5_core_create_cq+0x1d0/0x2d0 [mlx5_core] [<00000000cef0a696>] mlx5e_create_cq+0x210/0x3f0 [mlx5_core] [<000000009c642c26>] mlx5e_open_cq+0xb4/0x130 [mlx5_core] [<0000000058dfa578>] mlx5e_ptp_open+0x7f4/0xe10 [mlx5_core] [<0000000081839561>] mlx5e_open_channels+0x9cc/0x13e0 [mlx5_core] [<0000000009cf05d4>] mlx5e_switch_priv_channels+0xa4/0x230 [mlx5_core] [<0000000042bbedd8>] mlx5e_safe_switch_params+0x14c/0x300 [mlx5_core] [<0000000004bc9db8>] set_pflag_tx_port_ts+0x9c/0x160 [mlx5_core] [<00000000a0553443>] mlx5e_set_priv_flags+0xd0/0x1b0 [mlx5_core] [<00000000a8f3d84b>] ethnl_set_privflags+0x234/0x2d0 [<00000000fd27f27c>] genl_family_rcv_msg_doit+0x108/0x1d0 [<00000000f495e2bb>] genl_family_rcv_msg+0xe4/0x1f0 [<00000000646c5c2c>] genl_rcv_msg+0x78/0x120 [<00000000d53e384e>] netlink_rcv_skb+0x74/0x1a0
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-debug | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub