CVE-2024-35855

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries their activity from the device. As part of this task it accesses the entry pointed by 'ventry->entry', but this entry can be changed concurrently by the rehash delayed work, leading to a use-after-free [1]. Fix by closing the race and perform the activity query under the 'vregion->lock' mutex. [1] BUG: KASAN: slab-use-after-free in mlxsw_sp_acl_tca...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 2bffc5322fd8679e879cd6370881ee50cf141ada < 1b73f6e4ea770410a937a8db98f77e52594d23a0, >= 2bffc5322fd8679e879cd6370881ee50cf141ada < e24d2487424779c02760ff50cd9021b8676e19ef, >= 2bffc5322fd8679e879cd6370881ee50cf141ada < c17976b42d546ee118ca300db559630ee96fb758, >= 2bffc5322fd8679e879cd6370881ee50cf141ada < b996e8699da810e4c915841d6aaef761007f933a, >= 2bffc5322fd8679e879cd6370881ee50cf141ada < feabdac2057e863d0e140a2adf3d232eb4882db4, >= 2bffc5322fd8679e879cd6370881ee50cf141ada < b183b915beef818a25e3154d719ca015a1ae0770, >= 2bffc5322fd8679e879cd6370881ee50cf141ada < 79b5b4b18bc85b19d3a518483f9abbbe6d7b3ba4, >= 5.1, >= 5.1 < 5.4.275, >= 5.5 < 5.10.216, >= 5.11 < 5.15.158, >= 5.16 < 6.1.90, >= 6.2 < 6.6.30, >= 6.7 < 6.8.9, 6.9

Fixed versions

5.4.275, 5.10.216, 5.15.158, 6.1.90, 6.6.30, 6.8.9

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416