In the Linux kernel, the following vulnerability has been resolved:
net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
In mlx4_en_try_alloc_resources(), mlx4_en_copy_priv() is called and tmp->tx_cq will be freed on the error path of mlx4_en_copy_priv(). After that mlx4_en_alloc_resources() is called and there is a dereference of &tmp->tx_cq[t][i] in mlx4_en_alloc_resources(), which could lead to a use after free problem on failure of mlx4_en_copy_priv().
Fix this bug by adding a check of mlx4_en_copy_priv()
This bug was found by a static analyzer. The analysis employs differential checking to identify inconsistent security operations (e.g., checks or kfrees) between two code paths and confirms that the inconsistent operations are not recovered in the current function or the callers, so they constitute bugs.
Note that, as a bug found by static analysis, it can be a false positive or hard to trigger. Multiple researchers have cross-reviewed the bug.
Builds with CONFIG_MLX4_EN=m show no new warnings, and our static analyzer no longer warns about this code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-debuginfo-common-aarch64 | Jul 9, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 24, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Jan 21, 2025 | May 24, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-rtUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-man | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-aws-5.4 | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub