Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. So, the mlx5e_rep_priv is already freed while trying to get rpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free. So add the checking to make sure access the data of vport rep which is still loaded.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected d1569537a837d66620aa7ffc2bddf918e902f227 before 3e45dd1622a2c1a83c11bf42fdd8c1810123d6c0; affected d1569537a837d66620aa7ffc2bddf918e902f227 before 47c78d3fc26e38ab805613a0f592dc8a820c7c64; affected d1569537a837d66620aa7ffc2bddf918e902f227 before 5a03b368562a7ff5f5f1f63b5adf8309cbdbd5be |
| Linux / Linux | affected 6.6; unaffected 0 before 6.6; unaffected 6.6.70 through 6.6.*; unaffected 6.12.9 through 6.12.*; unaffected 6.13 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/3e45dd1622a2c1a83c11bf42fdd8c1810123d6c0
- https://git.kernel.org/stable/c/47c78d3fc26e38ab805613a0f592dc8a820c7c64
- https://git.kernel.org/stable/c/5a03b368562a7ff5f5f1f63b5adf8309cbdbd5be
ADP enrichment
No English description supplied.
No references supplied.