In the Linux kernel, the following vulnerability has been resolved:
vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
Fix an unwind issue in mlx5vf_add_migration_pages().
If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak.
Any pages successfully added to the SG table will be freed as part of mlx5vf_free_data_buffer().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 13, 2025 | Dec 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k | Feb 20, 2025 | Dec 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub