In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix CT entry update leaks of modify header context
The cited commit allocates a new modify header to replace the old one when updating CT entry. But if failed to allocate a new one, eg. exceed the max number firmware can support, modify header will be an error pointer that will trigger a panic when deallocating it. And the old modify header point is copied to old attr. When the old attr is freed, the old modify header is lost.
Fix it by restoring the old attr to attr when failed to allocate a new modify header context. So when the CT entry is freed, the right modify header context will be freed. And the panic of accessing error pointer is also fixed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Aug 20, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-amazon | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04c | Dec 13, 2024 | Aug 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub