In the Linux kernel, the following vulnerability has been resolved:
ice: Avoid crash from unnecessary IDA free
In the remove path, there is an attempt to free the aux_idx IDA whether it was allocated or not. This can potentially cause a crash when unloading the driver on systems that do not initialize support for RDMA. But, this free cannot be gated by the status bit for RDMA, since it is allocated if the driver detects support for RDMA at probe time, but the driver can enter into a state where RDMA is not supported after the IDA has been allocated at probe time and this would lead to a memory leak.
Initialize aux_idx to an invalid value and check for a valid value when unloading to determine if an IDA free is necessary.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-apmUpgrade dtb-renesasUpgrade dtb-appleUpgrade gfs2-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub