In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
rx_create no longer allocates a modify_hdr instance that needs to be cleaned up. The mlx5_modify_header_dealloc call will lead to a NULL pointer dereference. A leak in the rules also previously occurred since there are now two rules populated related to status.
BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 109907067 P4D 109907067 PUD 116890067 PMD 0 Oops: 0000 [#1] SMP CPU: 1 PID: 484 Comm: ip Not tainted 6.9.0-rc2-rrameshbabu+ #254 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.3-1-1 04/01/2014 RIP: 0010:mlx5_modify_header_dealloc+0xd/0x70 <snip> Call Trace: <TASK> ? show_regs+0x60/0x70 ? __die+0x24/0x70 ? page_fault_oops+0x15f/0x430 ? free_to_partial_list.constprop.0+0x79/0x150 ? do_user_addr_fault+0x2c9/0x5c0 ? exc_page_fault+0x63/0x110 ? asm_exc_page_fault+0x27/0x30 ? mlx5_modify_header_dealloc+0xd/0x70 rx_create+0x374/0x590 rx_add_rule+0x3ad/0x500 ? rx_add_rule+0x3ad/0x500 ? mlx5_cmd_exec+0x2c/0x40 ? mlx5_create_ipsec_obj+0xd6/0x200 mlx5e_accel_ipsec_fs_add_rule+0x31/0xf0 mlx5e_xfrm_add_state+0x426/0xc00 <snip>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-appleUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kb | Jul 23, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-raspi | Sep 12, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub