In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
When calling mlxsw_sp_acl_tcam_region_destroy() from an error path after failing to attach the region to an ACL group, we hit a NULL pointer dereference upon 'region->group->tcam' [1].
Fix by retrieving the 'tcam' pointer using mlxsw_sp_acl_to_tcam().
[1] BUG: kernel NULL pointer dereference, address: 0000000000000000 [...] RIP: 0010:mlxsw_sp_acl_tcam_region_destroy+0xa0/0xd0 [...] Call Trace: mlxsw_sp_acl_tcam_vchunk_get+0x88b/0xa20 mlxsw_sp_acl_tcam_ventry_add+0x25/0xe0 mlxsw_sp_acl_rule_add+0x47/0x240 mlxsw_sp_flower_replace+0x1a9/0x1d0 tc_setup_cb_add+0xdc/0x1c0 fl_hw_replace_filter+0x146/0x1f0 fl_change+0xc17/0x1360 tc_new_tfilter+0x472/0xb90 rtnetlink_rcv_msg+0x313/0x3b0 netlink_rcv_skb+0x58/0x100 netlink_unicast+0x244/0x390 netlink_sendmsg+0x1e4/0x440 ____sys_sendmsg+0x164/0x260 ___sys_sendmsg+0x9a/0xe0 __sys_sendmsg+0x7a/0xc0 do_syscall_64+0x40/0xe0 entry_SYSCALL_64_after_hwframe+0x63/0x6b
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-core | Sep 26, 2024 | Feb 23, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | May 13, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 1, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Apr 9, 2024 | Feb 23, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 23, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Feb 23, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extra | Oct 2, 2024 | Feb 23, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-preempt-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-rt | Mar 13, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1139-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-4.15.0-233-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1170-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1160-kvmUpgrade linux-image-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oemUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-4.15.0-1185-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1177-awsUpgrade linux-image-4.15.0-233-genericUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1022-gcp | May 17, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 28, 2026 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub