In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum: Protect driver from buggy firmware
When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port (local port 0), which exists, but lacks a netdev.
This can result in a NULL pointer dereference when calling netif_carrier_{on,off}().
Fix this by bailing early when processing an event reported for the CPU port. Problem was only observed when running on top of a buggy emulator.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-devel | Sep 26, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.93-87.444Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Dec 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Oct 2, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade kernel-default | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub