CVE-2024-26586

2024-02-2314:02:36

redhat.com

access.redhat.com

linux kernel

cve-2024-26586

vulnerability

mlxsw spectrum_acl_tcam

stack corruption

acl group

limit

update

firmware

pagt

test case

mitigation

module blacklist

red hat.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists (ACLs). This flaw allows a local user to crash or potentially escalate their privileges on the system.

Mitigation

To mitigate this issue, prevent the mlxsw_spectrum module from being loaded. Please see <https://access.redhat.com/solutions/41278> for information on blacklisting a kernel module to prevent it from loading automatically.