CVE-2024-35854

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end of the work if the number of credits is non-negative as the assumption is that this is indicative of migration being complete. This assumption is incorrect as a non-negative number of credits can also be the result of a failed migration. The destruction of a region that still has filters referenci...

Affected product and versions

Product

Linux Linux, linux_kernel, linux kernel

Affected versions

>= c9c9af91f1d9a636aecc55302c792538e549a430 < e118e7ea24d1392878ef85926627c6bc640c4388, >= c9c9af91f1d9a636aecc55302c792538e549a430 < a429a912d6c779807f4d72a6cc0a1efaaa3613e1, >= c9c9af91f1d9a636aecc55302c792538e549a430 < 4c89642ca47fb620914780c7c51d8d1248201121, >= c9c9af91f1d9a636aecc55302c792538e549a430 < 813e2ab753a8f8c243a39ede20c2e0adc15f3887, >= c9c9af91f1d9a636aecc55302c792538e549a430 < 311eeaa7b9e26aba5b3d57b09859f07d8e9fc049, >= c9c9af91f1d9a636aecc55302c792538e549a430 < a02687044e124f8ccb427cd3632124a4e1a7d7c1, >= c9c9af91f1d9a636aecc55302c792538e549a430 < 54225988889931467a9b55fdbef534079b665519, >= 5.1, >= c9c9af91f1d9, >= 5.1 < 5.4.275, >= 5.5 < 5.10.216, >= 5.11 < 5.15.158, >= 5.16 < 6.1.90, >= 6.2 < 6.6.30, >= 6.7 < 6.8.9, 6.9, 10.0

Fixed versions

5.4.275, 5.10.216, 5.15.158, 6.1.90, 6.6.30, 6.8.9

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416