CVE-2024-26724

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed to hit following use after free warning recently: 2169.711665 ================================================================== 2169.714009...

CVE-2024-26724 net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed to hit following use after free warning recently: 2169.711665 ================================================================== 2169.714009...

CVE-2024-26724 net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed to hit following use after free warning recently: 2169.711665 ================================================================== 2169.714009...

CVE-2024-26724: Use After Free

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers I managed to hit following use after free warning recently: 2169.711665 ================================================================== 2169.714009...

Unbreakable Enterprise kernel security update

5.4.17-2136.328.3 - IB/cm: Cancel mad on the DREQ event when the state is MRAREPRCVD Mark Zhang Orabug: 36143228 - KSPLICE: make sure the stack is zeroed. Gregory Herrero Orabug: 36154654 - sched/fair: Fix tg-load when offlining a CPU Vincent Guittot Orabug: 36185207 - i2c: core: Fix atomic xfer...

PT-2024-3401

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc2jiri+ Description: The vulnerability is related to a use-after-free issue in the mlx5 dpll remove function, which can cause a denial-of-service. The issue occurs when a delayed work timer is triggered,...

PT-2024-3394

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.2.0-32-generic 3222.04.1-Ubuntu Description: The vulnerability is related to a field-spanning write in the mlx5 ib post send function, which can lead to a potential buffer overflow. This issue is associated wi...

kernel: Linux kernel: Denial of Service in mlx5 driver due to memory leaks

A flaw was found in the Linux kernel's mlx5 driver. During a Precision Time Protocol PTP resynchronization operation, socket buffers SKBs were not properly freed, leading to a memory leak. Additionally, an error in the mlx5eskbfifohasroom function's counter check could cause further resource leak...

kernel: mlx5: fix possible ptp queue fifo use-after-free

In the Linux kernel, the following vulnerability has been resolved: mlx5: fix possible ptp queue fifo use-after-free Fifo indexes are not checked during pop operations and it leads to potential use-after-free when poping from empty queue. Such case was possible during re-sync action. WARNONONCE...

kernel: net/mlx5: Fix steering rules cleanup

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted in teardown path when EEH happens. Since the vport's promisc settingsuc, mc and all in firmware are reset after EEH, mlx5 driver will try to...

kernel: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to...

kernel: Linux kernel: Denial of Service in mlx5 driver due to memory leaks

A flaw was found in the Linux kernel's mlx5 driver. During a Precision Time Protocol PTP resynchronization operation, socket buffers SKBs were not properly freed, leading to a memory leak. Additionally, an error in the mlx5eskbfifohasroom function's counter check could cause further resource leak...

kernel: net/mlx5: Fix steering rules cleanup

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix steering rules cleanup vport's mc, uc and multicast rules are not deleted in teardown path when EEH happens. Since the vport's promisc settingsuc, mc and all in firmware are reset after EEH, mlx5 driver will try to...

PT-2025-18822

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 component related to E-Switch. The issue involves an error in error handling code where it dereference...

PT-2023-9744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free error in the IB/mlx5 component of the Linux kernel. This error occurs when the workqueue allocation fails and returns NULL in mlx5 mkey cache ini...

PT-2024-14682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a revert in the Linux kernel, specifically "net/mlx5: Block entering switchdev mode with ns inconsistency". This revert is required due to the suspicion that it i...

PT-2025-40688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the mlx5dr cmd create reformat ctx function within the net/mlx5 module of the Linux kernel. Specifically, when mlx5 cmd exec fails, the memory pointed to by the i...

PT-2023-36671

Уязвимость функции mlx5e fs tt redirect any create модуля drivers/net/ethernet/mellanox/mlx5/core/en/fs tt redirect.c драйвера сетевых адаптеров Ethernet Mellanox ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования...

PT-2025-40214

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-1017.19.3.g0677e61-bluefield Description The Linux kernel contains a flaw in the mlx5 driver where devlink parameters are not unregistered when an interface is down. This can lead to a warning message duri...

kernel: net/mlx5: E-Switch, pair only capable devices

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...