In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
When calling mlxsw_sp_acl_tcam_region_destroy() from an error path after failing to attach the region to an ACL group, we hit a NULL pointer dereference upon 'region->group->tcam' [1].
Fix by retrieving the 'tcam' pointer using mlxsw_sp_acl_to_tcam().
[1] BUG: kernel NULL pointer dereference, address: 0000000000000000 [...] RIP: 0010:mlxsw_sp_acl_tcam_region_destroy+0xa0/0xd0 [...] Call Trace: mlxsw_sp_acl_tcam_vchunk_get+0x88b/0xa20 mlxsw_sp_acl_tcam_ventry_add+0x25/0xe0 mlxsw_sp_acl_rule_add+0x47/0x240 mlxsw_sp_flower_replace+0x1a9/0x1d0 tc_setup_cb_add+0xdc/0x1c0 fl_hw_replace_filter+0x146/0x1f0 fl_change+0xc17/0x1360 tc_new_tfilter+0x472/0xb90 rtnetlink_rcv_msg+0x313/0x3b0 netlink_rcv_skb+0x58/0x100 netlink_unicast+0x244/0x390 netlink_sendmsg+0x1e4/0x440 ____sys_sendmsg+0x164/0x260 ___sys_sendmsg+0x9a/0xe0 __sys_sendmsg+0x7a/0xc0 do_syscall_64+0x40/0xe0 entry_SYSCALL_64_after_hwframe+0x63/0x6b
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-doc | Sep 26, 2024 | Feb 23, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | May 13, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Apr 9, 2024 | Feb 23, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 23, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Feb 23, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-debugUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-kvm | Oct 2, 2024 | Feb 23, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-develUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-baseUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-manUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-renesas | Mar 13, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-233-lowlatencyUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1139-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1177-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-4.15.0-1160-kvmUpgrade linux-image-4.15.0-233-genericUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-4.15.0-1185-azureUpgrade linux-image-4.15.0-1170-gcpUpgrade linux-image-starfiveUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04c | May 17, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 28, 2026 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub