27 matches found
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix incorrect list API usage The Linux kernel CVE team has assigned CVE-2024-36006 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052025-CVE-2024-36006-c032@gregkh/T...
kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The Linux kernel CVE team has assigned CVE-2024-35853 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2024-35853-869a@gregkh/T...
Linux spectrum_acl_tcam.c DoS
The vulnerability of the spectrumacltcam.c component in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
CLSA-2025-1738853271 Fix of 54 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26595 - mlxsw: spectrumacltcam: Fix NULL pointer dereference in error path CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597 - netpoll: make ndopollcontroller optional - bonding: use netpollpolldev helper - netpoll: do not test...
CLSA-2025-1738852812 Fix of 54 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26595 - mlxsw: spectrumacltcam: Fix NULL pointer dereference in error path CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597 - netpoll: make ndopollcontroller optional - bonding: use netpollpolldev helper - netpoll: do not test...
kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The Linux kernel CVE team has assigned CVE-2024-35854 to this issue. Upstream advisory:...
kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...
kernel: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
A flaw was found in the Linux kernel, where a faulty error handler in the driver for certain Mellanox hardware could lead to a null pointer reference. This issue affects system stability...
kernel: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
A flaw was found in the Linux kernel, where a faulty error handler in the driver for certain Mellanox hardware could lead to a null pointer reference. This issue affects system stability...
mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
...
mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
...
kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...
kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The Linux kernel CVE team has assigned CVE-2024-35853 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2024-35853-869a@gregkh/T...
kernel: mlxsw: spectrum_acl_tcam: Fix warning during rehash
A flaw was found in the Linux kernel's Mellanox Spectrum switch driver mlxsw. This flaw allows a local user to cause a denial of service DoS through an inconsistent driver state. When an error occurs during an Access Control List ACL filter migration rehash operation, the driver resets chunk...
kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...
kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The Linux kernel CVE team has assigned CVE-2024-35854 to this issue. Upstream advisory:...
kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...
Mellanox Technologies Switch ASICs DoS
The vulnerability of the function mlxswspacltcamventryactivityget in the driver drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c of the Mellanox Technologies Switch ASICs for the Linux operating system is related to the reutilization of previously released memory due to competitive access to...
kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption
A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists ACLs. This flaw allows a local user to crash or potentially escalate their privileges on the system...
PT-2024-3847
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the mlxsw spectrum acl tcam module. This vulnerability occurs when the rule activity update delayed...