123 matches found
PT-2024-3848
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a possible use-after-free during rehash in the mlxsw spectrum acl tcam module. The rehash delayed work migrates filters from one region to another according to the numbe...
PT-2024-3847
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the mlxsw spectrum acl tcam module. This vulnerability occurs when the rule activity update delayed...
PT-2024-8511
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak vulnerability has been identified in the Linux kernel, specifically in the mlxsw spectrum acl tcam component. The issue arises when the rehash delayed work is canceled whil...
PT-2024-8477
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A memory leak vulnerability has been identified in the Linux kernel, specifically in the mlxsw spectrum acl tcam component. This issue occurs during the rehash process, where filters are migrat...
kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption
A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists ACLs. This flaw allows a local user to crash or potentially escalate their privileges on the system...
PT-2024-26844
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The Linux kernel has a vulnerability in the mlxsw spectrum acl tcam module. The rehash delayed work migrates filters from one region to another by iterating over all chunks and filters. When th...
PT-2024-26843
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue arises from the incorrect usage of the list API in the Linux kernel, specifically in the mlxsw spectrum acl tcam module. The functions that migrate chunks within a region and entries...
kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption
A kernel stack flaw that corrupted the Linux kernel’s Mellanox Technologies Spectrum Ethernet driver was found when a user initialized more than 16 access control lists ACLs. This flaw allows a local user to crash or potentially escalate their privileges on the system...
The vulnerability of the mlxsw_sp_acl_tcam_init() function in the drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c file of the Mellanox network card driver for the Linux operating system allows a attacker to cause a service failure or exert other effects.
The vulnerability of the mlxswspacltcaminit function in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c file of the Mellanox network card driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system...
The vulnerability of the function mlxsw_sp_acl_tcam_regionDestroy() in the driver network cards of Mellanox for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mlxwspacltcamregiondestroy function in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c file of the Mellanox network card driver for the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker t...
OESA-2024-1257 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth,...
OESA-2024-1261 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth,...
SUSE CVE-2024-26595
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix NULL pointer dereference in error path When calling mlxswspacltcamregiondestroy from an error path after failing to attach the region to an ACL group, we hit a NULL pointer dereference upon...
SUSE CVE-2024-26586
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn, each ACL points to a...
AZL-39887 CVE-2024-26595 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix NULL pointer dereference in error path When calling mlxswspacltcamregiondestroy from an error path after failing to attach the region to an ACL group, we hit a NULL pointer dereference upon...
Null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix NULL pointer dereference in error path When calling mlxswspacltcamregiondestroy from an error path after failing to attach the region to an ACL group, we hit a NULL pointer dereference upon...
UBUNTU-CVE-2024-26595
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix NULL pointer dereference in error path When calling mlxswspacltcamregiondestroy from an error path after failing to attach the region to an ACL group, we hit a NULL pointer dereference upon...
DEBIAN-CVE-2024-26586
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn, each ACL points to a...
UBUNTU-CVE-2024-26586
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn, each ACL points to a...
CVE-2024-26586 mlxsw: spectrum_acl_tcam: Fix stack corruption
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group in the device. The group contains a list of ACLs. In turn, each ACL points to a...