In the Linux kernel, the following vulnerability has been...
High severity
Unreviewed
Published
Jan 15, 2025
to the GitHub Advisory Database
•
Updated Jan 21, 2025
Description
Published by the National Vulnerability Database
Jan 15, 2025
Published to the GitHub Advisory Database
Jan 15, 2025
Last updated
Jan 21, 2025
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Skip restore TC rules for vport rep without loaded flag
During driver unload, unregister_netdev is called after unloading
vport rep. So, the mlx5e_rep_priv is already freed while trying to get
rpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free.
So add the checking to make sure access the data of vport rep which is
still loaded.
References