In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum: Protect driver from buggy firmware
When processing port up/down events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not the CPU port (local port 0), which exists, but lacks a netdev.
This can result in a NULL pointer dereference when calling netif_carrier_{on,off}().
Fix this by bailing early when processing an event reported for the CPU port. Problem was only observed when running on top of a buggy emulator.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade perfUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules | Sep 26, 2024 | May 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.93-87.444Upgrade perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Dec 12, 2024 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 24, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 24, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade perf | Oct 2, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-rt-extra | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub