In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map
Just simply reordering the functions mlx5e_ptp_metadata_map_put and mlx5e_ptpsq_track_metadata in the mlx5e_txwqe_complete context is not good enough since both the compiler and CPU are free to reorder these two functions. If reordering does occur, the issue that was supposedly fixed by 7e3f3ba97e6c ("net/mlx5e: Track xmit submission to PTP WQ after populating metadata map") will be seen. This will lead to NULL pointer dereferences in mlx5e_ptpsq_mark_ts_cqes_undelivered in the NAPI polling context due to the tracking list being populated before the metadata map.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-rt-debug-develUpgrade kernelUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-64k-debug-core | Nov 4, 2024 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-devel-matched | Jul 29, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-zfcpdump | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub