In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: fix a double-free in arfscreategroups
When in allocated by kvzalloc fails, arfscreategroups will free
ft->g and return an error. However, arfscreatetable, the only caller of
arfscreategroups, will hold this error and call to
mlx5edestroyflow_table, in which the ft->g will be freed again.
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2338.0,
"function_hash": "308701382539658070486998829234362620953"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2501afe6c4c9829d03abe9a368b83d9ea1b611b7",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c",
"function": "arfs_create_groups"
},
"id": "CVE-2024-35835-06885f20"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"205196110217421437945536572285868770559",
"134305149833743962260875619540232261278",
"254774591677220833381596922839219446842",
"66659813777981439787663763053748158057",
"103115150135373893871965405999435675891",
"308514390217116525482697362280067476999",
"89677205639691606164779191950683042831",
"59225610839907335449478451424941486025",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"137358198620561083204213034671060847348",
"216855556949894359119720714829686445312",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"203289606470876905852102643693064793149",
"254260428928623140863911609352598120697",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"185892350377699223666876362549166372871",
"179430979223791953470256244005051377467",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"105582293422098557470354842432761836507",
"181279946875171941912663481906504010978",
"146067481272821696318761909287923385776",
"334039693739915635107783739455004781026",
"115603007606412401097808449638520564180",
"240098380416472899416879346485516224057",
"3247986863790347932858598944651980592",
"99942860739388198228090365305573255374",
"119483422031757276039054338440953520437",
"196580459393737296282214854280611862462"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
},
"id": "CVE-2024-35835-42e9b2cc"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2338.0,
"function_hash": "308701382539658070486998829234362620953"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b21db3f1ab7967a81d6bbd328d28fe5a4c07a8a7",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c",
"function": "arfs_create_groups"
},
"id": "CVE-2024-35835-48874a20"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2338.0,
"function_hash": "308701382539658070486998829234362620953"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c",
"function": "arfs_create_groups"
},
"id": "CVE-2024-35835-9cfed570"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"205196110217421437945536572285868770559",
"134305149833743962260875619540232261278",
"254774591677220833381596922839219446842",
"66659813777981439787663763053748158057",
"103115150135373893871965405999435675891",
"308514390217116525482697362280067476999",
"89677205639691606164779191950683042831",
"59225610839907335449478451424941486025",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"137358198620561083204213034671060847348",
"216855556949894359119720714829686445312",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"203289606470876905852102643693064793149",
"254260428928623140863911609352598120697",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"185892350377699223666876362549166372871",
"179430979223791953470256244005051377467",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"105582293422098557470354842432761836507",
"181279946875171941912663481906504010978",
"146067481272821696318761909287923385776",
"334039693739915635107783739455004781026",
"115603007606412401097808449638520564180",
"240098380416472899416879346485516224057",
"3247986863790347932858598944651980592",
"99942860739388198228090365305573255374",
"119483422031757276039054338440953520437",
"272431496785186751578959379205157328900"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2501afe6c4c9829d03abe9a368b83d9ea1b611b7",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
},
"id": "CVE-2024-35835-9ff3a0db"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2338.0,
"function_hash": "308701382539658070486998829234362620953"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6d5189246f590e4e1f167991558bdb72a4738b",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c",
"function": "arfs_create_groups"
},
"id": "CVE-2024-35835-c95376a7"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"205196110217421437945536572285868770559",
"134305149833743962260875619540232261278",
"254774591677220833381596922839219446842",
"66659813777981439787663763053748158057",
"103115150135373893871965405999435675891",
"308514390217116525482697362280067476999",
"89677205639691606164779191950683042831",
"59225610839907335449478451424941486025",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"137358198620561083204213034671060847348",
"216855556949894359119720714829686445312",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"203289606470876905852102643693064793149",
"254260428928623140863911609352598120697",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"185892350377699223666876362549166372871",
"179430979223791953470256244005051377467",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"105582293422098557470354842432761836507",
"181279946875171941912663481906504010978",
"146067481272821696318761909287923385776",
"334039693739915635107783739455004781026",
"115603007606412401097808449638520564180",
"240098380416472899416879346485516224057",
"3247986863790347932858598944651980592",
"99942860739388198228090365305573255374",
"119483422031757276039054338440953520437",
"196580459393737296282214854280611862462"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6d5189246f590e4e1f167991558bdb72a4738b",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
},
"id": "CVE-2024-35835-d2441fe3"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"205196110217421437945536572285868770559",
"134305149833743962260875619540232261278",
"254774591677220833381596922839219446842",
"66659813777981439787663763053748158057",
"103115150135373893871965405999435675891",
"308514390217116525482697362280067476999",
"89677205639691606164779191950683042831",
"59225610839907335449478451424941486025",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"137358198620561083204213034671060847348",
"216855556949894359119720714829686445312",
"131090360479201525519840441704115433253",
"149672000168055030283464035613227744860",
"203289606470876905852102643693064793149",
"254260428928623140863911609352598120697",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"185892350377699223666876362549166372871",
"179430979223791953470256244005051377467",
"208875050797154596404477358909810657361",
"322909590569283539359695832232703309614",
"105582293422098557470354842432761836507",
"181279946875171941912663481906504010978",
"146067481272821696318761909287923385776",
"334039693739915635107783739455004781026",
"115603007606412401097808449638520564180",
"240098380416472899416879346485516224057",
"3247986863790347932858598944651980592",
"99942860739388198228090365305573255374",
"119483422031757276039054338440953520437",
"272431496785186751578959379205157328900"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf116d9c3c2aebd653c2dfab5b10c278e9ec3ee5",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
},
"id": "CVE-2024-35835-f1df1ed6"
}
]