Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write the toggle value to an already-freed page. Move free_page() after bnxt_qplib_destroy_cq.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected e275919d96693c5ca964b20d73a33d52a7e57f04 before 8a8d69a01bda1fec9b07b5559be2b6ed45b1e974; affected e275919d96693c5ca964b20d73a33d52a7e57f04 before 33aed3ba04aa56eeeb876935896aa6530c46640e; affected e275919d96693c5ca964b20d73a33d52a7e57f04 before b193854675ecad43b4d69c304c1b6a90b206cc99; affected e275919d96693c5ca964b20d73a33d52a7e57f04 before bb45e06f9914ca64ac95341a80a0c20bb8dd46a9 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 6.12.114 through 6.12.*; unaffected 6.18.57 through 6.18.*; unaffected 7.1.5 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/8a8d69a01bda1fec9b07b5559be2b6ed45b1e974
- https://git.kernel.org/stable/c/33aed3ba04aa56eeeb876935896aa6530c46640e
- https://git.kernel.org/stable/c/b193854675ecad43b4d69c304c1b6a90b206cc99
- https://git.kernel.org/stable/c/bb45e06f9914ca64ac95341a80a0c20bb8dd46a9
ADP enrichment
No English description supplied.
No references supplied.