In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
rx_create no longer allocates a modify_hdr instance that needs to be cleaned up. The mlx5_modify_header_dealloc call will lead to a NULL pointer dereference. A leak in the rules also previously occurred since there are now two rules populated related to status.
BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 109907067 P4D 109907067 PUD 116890067 PMD 0 Oops: 0000 [#1] SMP CPU: 1 PID: 484 Comm: ip Not tainted 6.9.0-rc2-rrameshbabu+ #254 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.3-1-1 04/01/2014 RIP: 0010:mlx5_modify_header_dealloc+0xd/0x70 <snip> Call Trace: <TASK> ? show_regs+0x60/0x70 ? __die+0x24/0x70 ? page_fault_oops+0x15f/0x430 ? free_to_partial_list.constprop.0+0x79/0x150 ? do_user_addr_fault+0x2c9/0x5c0 ? exc_page_fault+0x63/0x110 ? asm_exc_page_fault+0x27/0x30 ? mlx5_modify_header_dealloc+0xd/0x70 rx_create+0x374/0x590 rx_add_rule+0x3ad/0x500 ? rx_add_rule+0x3ad/0x500 ? mlx5_cmd_exec+0x2c/0x40 ? mlx5_create_ipsec_obj+0xd6/0x200 mlx5e_accel_ipsec_fs_add_rule+0x31/0xf0 mlx5e_xfrm_add_state+0x426/0xc00 <snip>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optional | Jul 23, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classic | Sep 12, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub