Bug 2338212 (CVE-2024-57801) - CVE-2024-57801 kernel: net/mlx5e: Skip restore TC rules for vport rep without loaded flag
Summary: CVE-2024-57801 kernel: net/mlx5e: Skip restore TC rules for vport rep without...
Keywords:
Status: NEW
Alias: CVE-2024-57801
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-15 14:03 UTC by OSIDB Bzimport
Modified: 2025-01-28 13:28 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-01-15 14:03:39 UTC
In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Skip restore TC rules for vport rep without loaded flag

During driver unload, unregister_netdev is called after unloading
vport rep. So, the mlx5e_rep_priv is already freed while trying to get
rpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free.
So add the checking to make sure access the data of vport rep which is
still loaded.


Note You need to log in before you can comment on or make changes to this bug.