In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
In error flow of mlx5_tc_ct_entry_add_rule(), in case ct_rule_add() callback returns error, zone_rule->attr is used uninitiated. Fix it to use attr which has the needed pointer value.
Kernel log: BUG: kernel NULL pointer dereference, address: 0000000000000110 RIP: 0010:mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core] … Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x150/0x3e0 ? exc_page_fault+0x74/0x140 ? asm_exc_page_fault+0x22/0x30 ? mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core] ? mlx5_tc_ct_entry_add_rule+0x1d5/0x2f0 [mlx5_core] mlx5_tc_ct_block_flow_offload+0xc6a/0xf90 [mlx5_core] ? nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table] nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table] flow_offload_work_handler+0x142/0x320 [nf_flow_table] ? finish_task_switch.isra.0+0x15b/0x2b0 process_one_work+0x16c/0x320 worker_thread+0x28c/0x3a0 ? __pfx_worker_thread+0x10/0x10 kthread+0xb8/0xf0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 9, 2024 | Dec 2, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 10, 2025 | Dec 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Dec 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1076-kvm | Feb 20, 2025 | Dec 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub