In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum: Protect driver from buggy firmware
When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port (local port 0), which exists, but lacks a netdev.
This can result in a NULL pointer dereference when calling netif_carrier_{on,off}().
Fix this by bailing early when processing an event reported for the CPU port. Problem was only observed when running on top of a buggy emulator.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debug | Sep 26, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo | Dec 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rtUpgrade perfUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-devel | Oct 2, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-syms-rt | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub