Riskcovery

CVE-2024-40940

net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

In case of flow rule creation fail in mlx5_lag_create_port_sel_table(), instead of previously created rules, the tainted pointer is deleted deveral times. Fix this bug by using correct flow rules pointers.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 352899f384d4aefa77ede6310d08c1b515612a8f to before 531eab2da27dd42d68dfb841d82e987f4a6738b8Affected
  • 352899f384d4aefa77ede6310d08c1b515612a8f to before d857df86837ac1c30592e8a068204d16feac9930Affected
  • 352899f384d4aefa77ede6310d08c1b515612a8f to before a03a3fa12769e25f4385bee587afe1445aee7f7aAffected
  • 352899f384d4aefa77ede6310d08c1b515612a8f to before 229bedbf62b13af5aba6525ad10b62ad38d9ccb5Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.95 through 6.1.*Not affected
  • 6.6.35 through 6.6.*Not affected
  • 6.9.6 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.