In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc() calls xaalloccyclic() which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to caller tcfextsinitex() which sets exts->actions to NULL and returns 1 to caller flchange(). flchange() treats err == 1 as success, calling tcfextsvalidateex() which calls tcfactioninit() with exts->actions as argument, where it is dereferenced. Example trace: BUG: kernel NULL pointer dereference, address: 0000000000000000 CPU: 114 PID: 16151 Comm: handler114 Kdump: loaded Not tainted 5.14.0-503.16.1.el95.x8664 #1 RIP: 0010:tcfactioninit+0x1f8/0x2c0 Call Trace: tcfactioninit+0x1f8/0x2c0 tcfextsvalidateex+0x175/0x190 flchange+0x537/0x1120 [cls_flower]
{ "binaries": [ { "binary_version": "5.15.0-1069.71", "binary_name": "linux-bluefield-cloud-tools-common" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-bluefield-headers-5.15.0-1069" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-bluefield-tools-5.15.0-1069" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-bluefield-tools-host" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-buildinfo-5.15.0-1069-bluefield" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-headers-5.15.0-1069-bluefield" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-image-unsigned-5.15.0-1069-bluefield" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-image-unsigned-5.15.0-1069-bluefield-dbgsym" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-modules-5.15.0-1069-bluefield" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-modules-extra-5.15.0-1069-bluefield" }, { "binary_version": "5.15.0-1069.71", "binary_name": "linux-tools-5.15.0-1069-bluefield" } ], "availability": "Available for NVIDIA BlueField platforms" }
{ "binaries": [ { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1015" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-azure-6.11-headers-6.11.0-1015" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-azure-6.11-tools-6.11.0-1015" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-cloud-tools-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-headers-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1015-azure-dbgsym" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-extra-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-iwlwifi-6.11.0-1015-azure" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-tools-6.11.0-1015-azure" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1015-gcp-64k" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-gcp-6.11-headers-6.11.0-1015" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-gcp-6.11-tools-6.11.0-1015" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-headers-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-headers-6.11.0-1015-gcp-64k" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1015-gcp-64k" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1015-gcp-64k-dbgsym" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1015-gcp-dbgsym" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-6.11.0-1015-gcp-64k" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-extra-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-modules-extra-6.11.0-1015-gcp-64k" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-tools-6.11.0-1015-gcp" }, { "binary_version": "6.11.0-1015.15~24.04.1", "binary_name": "linux-tools-6.11.0-1015-gcp-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-buildinfo-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-buildinfo-6.11.0-26-generic-64k" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-cloud-tools-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-headers-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-headers-6.11.0-26-generic-64k" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-26" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-hwe-6.11-headers-6.11.0-26" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-hwe-6.11-tools-6.11.0-26" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-image-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-image-6.11.0-26-generic-dbgsym" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-26-generic-64k" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-26-generic-64k-dbgsym" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-26-generic-dbgsym" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-6.11.0-26-generic-64k" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-extra-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-ipu6-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-ipu7-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-iwlwifi-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-usbio-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-modules-vision-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-tools-6.11.0-26-generic" }, { "binary_version": "6.11.0-26.26~24.04.1", "binary_name": "linux-tools-6.11.0-26-generic-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-buildinfo-6.11.0-1014-lowlatency-64k" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-cloud-tools-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-headers-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-headers-6.11.0-1014-lowlatency-64k" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1014-lowlatency-64k" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1014-lowlatency-64k-dbgsym" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-image-unsigned-6.11.0-1014-lowlatency-dbgsym" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1014" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1014" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1014" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-modules-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-modules-6.11.0-1014-lowlatency-64k" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-modules-iwlwifi-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-tools-6.11.0-1014-lowlatency" }, { "binary_version": "6.11.0-1014.15~24.04.1", "binary_name": "linux-tools-6.11.0-1014-lowlatency-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.11.0-1010.10", "binary_name": "linux-buildinfo-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-buildinfo-6.11.0-1010-nvidia-64k" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-headers-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-headers-6.11.0-1010-nvidia-64k" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-image-unsigned-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-image-unsigned-6.11.0-1010-nvidia-64k" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-image-unsigned-6.11.0-1010-nvidia-64k-dbgsym" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-image-unsigned-6.11.0-1010-nvidia-dbgsym" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-modules-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-modules-6.11.0-1010-nvidia-64k" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-modules-extra-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-modules-extra-6.11.0-1010-nvidia-64k" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-modules-nvidia-fs-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-modules-nvidia-fs-6.11.0-1010-nvidia-64k" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-nvidia-6.11-headers-6.11.0-1010" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-nvidia-6.11-tools-6.11.0-1010" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-tools-6.11.0-1010-nvidia" }, { "binary_version": "6.11.0-1010.10", "binary_name": "linux-tools-6.11.0-1010-nvidia-64k" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "6.11.0-1022.22", "binary_name": "linux-buildinfo-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-headers-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-image-unsigned-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-image-unsigned-6.11.0-1022-oem-dbgsym" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-modules-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-modules-ipu6-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-modules-ipu7-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-modules-iwlwifi-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-modules-usbio-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-modules-vision-6.11.0-1022-oem" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-oem-6.11-headers-6.11.0-1022" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-oem-6.11-tools-6.11.0-1022" }, { "binary_version": "6.11.0-1022.22", "binary_name": "linux-tools-6.11.0-1022-oem" } ], "availability": "No subscription required" }