In the Linux kernel, the following vulnerability has been resolved:
nfp: flower: handle acti_netdevs allocation failure
The kmalloc_array() in nfp_fl_lag_do_work() will return null, if
the physical memory has run out. As a result, if we dereference
the acti_netdevs, the null pointer dereference bugs will happen.
This patch adds a check to judge whether allocation failure occurs.
If it happens, the delayed work will be rescheduled and try again.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
],
"versions": [
{
"version": "bb9a8d031140",
"lessThan": "d746889db75a",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "3b1e8a617eb0",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "928705e34101",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "0d387dc503f9",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "c9b4e220dd18",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "408ba7fd04f9",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "c8df9203bf22",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "9d8eb1238377",
"status": "affected",
"versionType": "git"
},
{
"version": "bb9a8d031140",
"lessThan": "84e95149bd34",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
],
"versions": [
{
"version": "4.18",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.18",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.311",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.273",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.214",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.153",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.1.83",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.6.23",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.7.11",
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.8.2",
"lessThanOrEqual": "6.8.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.9",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/0d387dc503f9a53e6d1f6e9dd0292d38f083eba5
git.kernel.org/stable/c/3b1e8a617eb0f4cdc19def530047a95b5abde07d
git.kernel.org/stable/c/408ba7fd04f959c61b50db79c983484312fea642
git.kernel.org/stable/c/84e95149bd341705f0eca6a7fcb955c548805002
git.kernel.org/stable/c/928705e341010dd910fdece61ccb974f494a758f
git.kernel.org/stable/c/9d8eb1238377cd994829f9162ae396a84ae037b2
git.kernel.org/stable/c/c8df9203bf22c66fa26e8d8c7f8ce181cf88099d
git.kernel.org/stable/c/c9b4e220dd18f79507803f38a55d53b483f6c9c3
git.kernel.org/stable/c/d746889db75a76aeee95fb705b8e1ac28c684a2e
lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.org/debian-lts-announce/2024/06/msg00020.html