In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map
Just simply reordering the functions mlx5e_ptp_metadata_map_put and mlx5e_ptpsq_track_metadata in the mlx5e_txwqe_complete context is not good enough since both the compiler and CPU are free to reorder these two functions. If reordering does occur, the issue that was supposedly fixed by 7e3f3ba97e6c ("net/mlx5e: Track xmit submission to PTP WQ after populating metadata map") will be seen. This will lead to NULL pointer dereferences in mlx5e_ptpsq_mark_ts_cqes_undelivered in the NAPI polling context due to the tracking list being populated before the metadata map.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-64k-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-64kUpgrade kernelUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelists | Nov 4, 2024 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvm | Jul 29, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-debug | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub