Riskcovery

CVE-2024-26856

net: sparx5: Fix use after free inside sparx5_del_mact_entry

State
Published
Severity
8.8 High
Published
Apr 17, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: sparx5: Fix use after free inside sparx5_del_mact_entry

Based on the static analyzis of the code it looks like when an entry from the MAC table was removed, the entry was still used after being freed. More precise the vid of the mac_entry was used after calling devm_kfree on the mac_entry. The fix consists in first using the vid of the mac_entry to delete the entry from the HW and after that to free it.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before e46274df1100fb0c06704195bfff5bfbd418bf64Affected
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before 0de693d68b0a18d5e256556c7c62d92cca35ad52Affected
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before e83bebb718fd1f42549358730e1206164e0861d6Affected
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before 71809805b95052ff551922f11660008fb3666025Affected
  • b37a1bae742f92cc9b1f777d54e04ee3d86bbfc2 to before 89d72d4125e94aa3c2140fedd97ce07ba9e37674Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.152 through 5.15.*Not affected
  • 6.1.82 through 6.1.*Not affected
  • 6.6.22 through 6.6.*Not affected
  • 6.7.10 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.