In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
rx_create no longer allocates a modify_hdr instance that needs to be cleaned up. The mlx5_modify_header_dealloc call will lead to a NULL pointer dereference. A leak in the rules also previously occurred since there are now two rules populated related to status.
BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 109907067 P4D 109907067 PUD 116890067 PMD 0 Oops: 0000 [#1] SMP CPU: 1 PID: 484 Comm: ip Not tainted 6.9.0-rc2-rrameshbabu+ #254 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.3-1-1 04/01/2014 RIP: 0010:mlx5_modify_header_dealloc+0xd/0x70 <snip> Call Trace: <TASK> ? show_regs+0x60/0x70 ? __die+0x24/0x70 ? page_fault_oops+0x15f/0x430 ? free_to_partial_list.constprop.0+0x79/0x150 ? do_user_addr_fault+0x2c9/0x5c0 ? exc_page_fault+0x63/0x110 ? asm_exc_page_fault+0x27/0x30 ? mlx5_modify_header_dealloc+0xd/0x70 rx_create+0x374/0x590 rx_add_rule+0x3ad/0x500 ? rx_add_rule+0x3ad/0x500 ? mlx5_cmd_exec+0x2c/0x40 ? mlx5_create_ipsec_obj+0xd6/0x200 mlx5e_accel_ipsec_fs_add_rule+0x31/0xf0 mlx5e_xfrm_add_state+0x426/0xc00 <snip>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azure | Jul 23, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-ibmUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde | Sep 12, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub