In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix command bitmask initialization
Command bitmask have a dedicated bit for MANAGE_PAGES command, this bit isn't Initialize during command bitmask Initialization, only during MANAGE_PAGES.
In addition, mlx5_cmd_trigger_completions() is trying to trigger completion for MANAGE_PAGES command as well.
Hence, in case health error occurred before any MANAGE_PAGES command have been invoke (for example, during mlx5_enable_hca()), mlx5_cmd_trigger_completions() will try to trigger completion for MANAGE_PAGES command, which will result in null-ptr-deref error.[1]
Fix it by Initialize command bitmask correctly.
While at it, re-write the code for better understanding.
[1] BUG: KASAN: null-ptr-deref in mlx5_cmd_trigger_completions+0x1db/0x600 [mlx5_core] Write of size 4 at addr 0000000000000214 by task kworker/u96:2/12078 CPU: 10 PID: 12078 Comm: kworker/u96:2 Not tainted 6.9.0-rc2_for_upstream_debug_2024_04_07_19_01 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_health0000:08:00.0 mlx5_fw_fatal_reporter_err_work [mlx5_core] Call Trace: <TASK> dump_stack_lvl+0x7e/0xc0 kasan_report+0xb9/0xf0 kasan_check_range+0xec/0x190 mlx5_cmd_trigger_completions+0x1db/0x600 [mlx5_core] mlx5_cmd_flush+0x94/0x240 [mlx5_core] enter_error_state+0x6c/0xd0 [mlx5_core] mlx5_fw_fatal_reporter_err_work+0xf3/0x480 [mlx5_core] process_one_work+0x787/0x1490 ? lockdep_hardirqs_on_prepare+0x400/0x400 ? pwq_dec_nr_in_flight+0xda0/0xda0 ? assign_work+0x168/0x240 worker_thread+0x586/0xd30 ? rescuer_thread+0xae0/0xae0 kthread+0x2df/0x3b0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x2d/0x70 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork_asm+0x11/0x20 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-tools-develUpgrade python3-perfUpgrade perf | Mar 27, 2025 | Nov 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-64k | Feb 20, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub