CVE-2024-35853

A memory leak exists in the Linux kernel within the mlxsw: spectrum_acl_tcam component during the rehash operation. The issue occurs because the code fails to verify if a backup chunk is NULL when a rollback of a failed migration is attempted, causing the backup chunk to be overwritten and leaked...

CVE-2024-35853

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks all the filters with the same priority in the region and in each...

CVE-2024-35854

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end ...

CVE-2024-35852 mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

CVE-2024-35852 mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

CVE-2024-35852 mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

CVE-2024-35852

CVE-2024-35852 : In the Linux kernel (mlxsw spectrum_acl_tcam), a memory leak can occur when rehash work is canceled while pending, as hints allocated for the migration may remain referenced. The fix frees the associated hints when a pending rehash work is canceled. Connected advisories reference...

CVE-2024-35854: Use After Free

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end ...

CVE-2024-35852: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

CVE-2024-35853: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks all the filters with the same priority in the region and in each...

PT-2024-3848

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a possible use-after-free during rehash in the mlxsw spectrum acl tcam module. The rehash delayed work migrates filters from one region to another according to the numbe...

PT-2024-8477

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A memory leak vulnerability has been identified in the Linux kernel, specifically in the mlxsw spectrum acl tcam component. This issue occurs during the rehash process, where filters are migrat...

PT-2024-26844

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The Linux kernel has a vulnerability in the mlxsw spectrum acl tcam module. The rehash delayed work migrates filters from one region to another by iterating over all chunks and filters. When th...

openssl: c_rehash script allows command injection

A flaw was found in OpenSSL. The crehash script does not properly sanitize shell meta-characters to prevent command injection. Some operating systems distribute this script in a manner where it is automatically executed. This flaw allows an attacker to execute arbitrary commands with the privileg...

SUSE CVE-2013-1667

The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service memory consumption and crash via a crafted hash key...

SUSE CVE-2022-1292

The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the...

SUSE CVE-2022-2068

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

openssl: c_rehash script allows command injection

A flaw was found in OpenSSL. The crehash script does not properly sanitize shell meta-characters to prevent command injection. Some operating systems distribute this script in a manner where it is automatically executed. This flaw allows an attacker to execute arbitrary commands with the privileg...

EulerOS 2.0 SP5 : openssl (EulerOS-SA-2022-2446)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properl...

OESA-2022-1951 linux-sgx security update

IntelR Software Guard Extensions IntelR SGX is an Intel technology for application developers seeking to protect select code and data from disclosure or modification. Security Fixes: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is...