In the Linux kernel, the following vulnerability has been resolved:
net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv().
Fix this bug by adding a check of mlx4_en_copy_priv()
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_MLX4_EN=m show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfo | Jul 9, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-preemptUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade kernel-azure-baseUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-symsUpgrade dtb-apmUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rt | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-aws-hweUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-raspi | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub