CVE-2024-38608

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix netif state handling

mlx5e_suspend cleans resources only if netif_device_present() returns

true. However, mlx5e_resume changes the state of netif, via

mlx5e_nic_enable, only if reg_state == NETREG_REGISTERED.

In the below case, the above leads to NULL-ptr Oops[1] and memory

leaks:

mlx5e_probe

_mlx5e_resume

mlx5e_attach_netdev

mlx5e_nic_enable <-- netdev not reg, not calling netif_device_attach()

register_netdev <-- failed for some reason.

ERROR_FLOW:

_mlx5e_suspend <-- netif_device_present return false, resources aren't freed :(

Hence, clean resources in this case as well.

[1]

BUG: kernel NULL pointer dereference, address: 0000000000000000

PGD 0 P4D 0

Oops: 0010 [#1] SMP

CPU: 2 PID: 9345 Comm: test-ovs-ct-gen Not tainted 6.5.0_for_upstream_min_debug_2023_09_05_16_01 #1

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014

RIP: 0010

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References