In the Linux kernel, the following vulnerability has been resolved:
ice: Avoid crash from unnecessary IDA free
In the remove path, there is an attempt to free the aux_idx IDA whether it was allocated or not. This can potentially cause a crash when unloading the driver on systems that do not initialize support for RDMA. But, this free cannot be gated by the status bit for RDMA, since it is allocated if the driver detects support for RDMA at probe time, but the driver can enter into a state where RDMA is not supported after the IDA has been allocated at probe time and this would lead to a memory leak.
Initialize aux_idx to an invalid value and check for a valid value when unloading to determine if an IDA free is necessary.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-docsUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-symsUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azure | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub