Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx = -22. Instead of waiting indefinitely for the sem, blocking flow now waits for index to be allocated or a sem acquisition timeout before beginning the timer for FW completion. Kernel log example: mlx5_core 0000:06:00.0: wait_func_handle_exec_timeout:1128:(pid 185911): cmd[-22]: CREATE_UCTX(0xa04) No done completion
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8e715cd613a1e872b9d918e912d90b399785761a before 4baae687a20ef2b82fde12de3c04461e6f2521d6; affected 8e715cd613a1e872b9d918e912d90b399785761a before f9caccdd42e999b74303c9b0643300073ed5d319; affected 8e715cd613a1e872b9d918e912d90b399785761a before 2d0962d05c93de391ce85f6e764df895f47c8918; affected 8e715cd613a1e872b9d918e912d90b399785761a before 94024332a129c6e4275569d85c0c1bfb2ae2d71b; affected 8e715cd613a1e872b9d918e912d90b399785761a before 485d65e1357123a697c591a5aeb773994b247ad7; affected 74dd45122b84479eee50bd0956ae8bc5799c9f8a; affected e801f81cee3c8901f52ee48c6329802b28fbb49c; affected d73d81447c6651904dd4a9e3fd88651ff174c1b7; affected 4646175c19fd019b773444a11ff62748eb83745b; affected 5.4.174 before 5.5; affected 5.10.94 before 5.11; affected 5.15.17 before 5.16; affected 5.16.3 before 5.17 |
| Linux / Linux | affected 5.17; unaffected 0 before 5.17; unaffected 6.1.93 through 6.1.*; unaffected 6.6.33 through 6.6.*; unaffected 6.8.12 through 6.8.*; unaffected 6.9.3 through 6.9.*; unaffected 6.10 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/4baae687a20ef2b82fde12de3c04461e6f2521d6
- https://git.kernel.org/stable/c/f9caccdd42e999b74303c9b0643300073ed5d319
- https://git.kernel.org/stable/c/2d0962d05c93de391ce85f6e764df895f47c8918
- https://git.kernel.org/stable/c/94024332a129c6e4275569d85c0c1bfb2ae2d71b
- https://git.kernel.org/stable/c/485d65e1357123a697c591a5aeb773994b247ad7
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/4baae687a20ef2b82fde12de3c04461e6f2521d6
- https://git.kernel.org/stable/c/f9caccdd42e999b74303c9b0643300073ed5d319
- https://git.kernel.org/stable/c/2d0962d05c93de391ce85f6e764df895f47c8918
- https://git.kernel.org/stable/c/94024332a129c6e4275569d85c0c1bfb2ae2d71b
- https://git.kernel.org/stable/c/485d65e1357123a697c591a5aeb773994b247ad7