CVE-2024-26586

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum_acl_tcam: Fix stack corruption

When tc filters are first added to a net device, the corresponding local

port gets bound to an ACL group in the device. The group contains a list

of ACLs. In turn, each ACL points to a different TCAM region where the

filters are stored. During forwarding, the ACLs are sequentially

evaluated until a match is found.

One reason to place filters in different regions is when they are added

with decreasing priorities and in an alternating order so that two

consecutive filters can never fit in the same region because of their

key usage.

In Spectrum-2 and newer ASICs the firmware started to report that the

maximum number of ACLs in a group is more than 16, but the layout of the

register that configures ACL groups (PAGT) was not updated to account

for that. It is therefore possible to hit stack corruption [1] in the

rare case where more than 16 ACLs in a group are required.

Fi

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References