In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix netif state handling
mlx5e_suspend cleans resources only if netif_device_present() returns true. However, mlx5e_resume changes the state of netif, via mlx5e_nic_enable, only if reg_state == NETREG_REGISTERED. In the below case, the above leads to NULL-ptr Oops[1] and memory leaks:
mlx5e_probe _mlx5e_resume mlx5e_attach_netdev mlx5e_nic_enable <-- netdev not reg, not calling netif_device_attach() register_netdev <-- failed for some reason. ERROR_FLOW: _mlx5e_suspend <-- netif_device_present return false, resources aren't freed :(
Hence, clean resources in this case as well.
[1] BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD 0 P4D 0 Oops: 0010 [#1] SMP CPU: 2 PID: 9345 Comm: test-ovs-ct-gen Not tainted 6.5.0_for_upstream_min_debug_2023_09_05_16_01 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:0x0 Code: Unable to access opcode bytes at0xffffffffffffffd6. RSP: 0018:ffff888178aaf758 EFLAGS: 00010246 Call Trace: <TASK> ? __die+0x20/0x60 ? page_fault_oops+0x14c/0x3c0 ? exc_page_fault+0x75/0x140 ? asm_exc_page_fault+0x22/0x30 notifier_call_chain+0x35/0xb0 blocking_notifier_call_chain+0x3d/0x60 mlx5_blocking_notifier_call_chain+0x22/0x30 [mlx5_core] mlx5_core_uplink_netdev_event_replay+0x3e/0x60 [mlx5_core] mlx5_mdev_netdev_track+0x53/0x60 [mlx5_ib] mlx5_ib_roce_init+0xc3/0x340 [mlx5_ib] __mlx5_ib_add+0x34/0xd0 [mlx5_ib] mlx5r_probe+0xe1/0x210 [mlx5_ib] ? auxiliary_match_id+0x6a/0x90 auxiliary_bus_probe+0x38/0x80 ? driver_sysfs_add+0x51/0x80 really_probe+0xc9/0x3e0 ? driver_probe_device+0x90/0x90 __driver_probe_device+0x80/0x160 driver_probe_device+0x1e/0x90 __device_attach_driver+0x7d/0x100 bus_for_each_drv+0x80/0xd0 __device_attach+0xbc/0x1f0 bus_probe_device+0x86/0xa0 device_add+0x637/0x840 __auxiliary_device_add+0x3b/0xa0 add_adev+0xc9/0x140 [mlx5_core] mlx5_rescan_drivers_locked+0x22a/0x310 [mlx5_core] mlx5_register_device+0x53/0xa0 [mlx5_core] mlx5_init_one_devl_locked+0x5c4/0x9c0 [mlx5_core] mlx5_init_one+0x3b/0x60 [mlx5_core] probe_one+0x44c/0x730 [mlx5_core] local_pci_probe+0x3e/0x90 pci_device_probe+0xbf/0x210 ? kernfs_create_link+0x5d/0xa0 ? sysfs_do_create_link_sd+0x60/0xc0 really_probe+0xc9/0x3e0 ? driver_probe_device+0x90/0x90 __driver_probe_device+0x80/0x160 driver_probe_device+0x1e/0x90 __device_attach_driver+0x7d/0x100 bus_for_each_drv+0x80/0xd0 __device_attach+0xbc/0x1f0 pci_bus_add_device+0x54/0x80 pci_iov_add_virtfn+0x2e6/0x320 sriov_enable+0x208/0x420 mlx5_core_sriov_configure+0x9e/0x200 [mlx5_core] sriov_numvfs_store+0xae/0x1a0 kernfs_fop_write_iter+0x10c/0x1a0 vfs_write+0x291/0x3c0 ksys_write+0x5f/0xe0 do_syscall_64+0x3d/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0 CR2: 0000000000000000 ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade rtlaUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-devel-matchedUpgrade libperfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-rt-devel | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 13, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-core | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade dtb-amdUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-azure | May 20, 2025 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub