In the Linux kernel, the following vulnerability has been resolved:
mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
In case of invalid INI file mlxsw_linecard_types_init() deallocates memory but doesn't reset pointer to NULL and returns 0. In case of any error occurred after mlxsw_linecard_types_init() call, mlxsw_linecards_init() calls mlxsw_linecard_types_fini() which performs memory deallocation again.
Add pointer reset to NULL.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-extra | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azure-fde | Nov 4, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub