CVE-2024-35853

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum_acl_tcam: Fix memory leak during rehash

The rehash delayed work migrates filters from one region to another.

This is done by iterating over all chunks (all the filters with the same

priority) in the region and in each chunk iterating over all the

filters.

If the migration fails, the code tries to migrate the filters back to

the old region. However, the rollback itself can also fail in which case

another migration will be erroneously performed. Besides the fact that

this ping pong is not a very good idea, it also creates a problem.

Each virtual chunk references two chunks: The currently used one

('vchunk->chunk') and a backup ('vchunk->chunk2'). During migration the

first holds the chunk we want to migrate filters to and the second holds

the chunk we are migrating filters from.

The code currently assumes - but does not verify - that the backup chunk

does not exist (NULL) if the currently used chunk

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References