Vulnerability of the mlx5r_umr_resource_cleanup() function in the drivers/infiniband/hw/mlx5/umr.c kernel module of the Linux operating system, allowing a hacker to trigger a service failure

The vulnerability of the mlx5rumrresourcecleanup function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-47694: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix UMR pd cleanup on error flow of driver init The cited commit moves the pd allocation from function mlx5rumrresourcecleanup to a new function mlx5rumrcleanup. So the fix in commit 1 is broken. In error flow, will hit...

CVE-2023-52851 IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF In the unlikely event that workqueue allocation fails and returns NULL in mlx5mkeycacheinit, delete the call to mlx5rumrresourcecleanup which frees th...