CVE-2024-35960 net/mlx5: Properly link new fs rules into the tree

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, addrulefg would only add newly created rules from the handle into the tree when they had a refcount of 1. On the other hand, createflowhandle tries hard to find and...

CVE-2024-35960

The Linux kernel contains a NULL pointer dereference vulnerability (CWE-476) in the net/mlx5 component. The issue stems from a logic flaw where create_flow_handle could incorrectly reference a recently added rule multiple times within the same handle. This resulted in a rule with a refcount of 2 ...