Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Collect command failures data only for known commands DEVX can issue a general command, which is not used by mlx5 driver. In case such command is failed, mlx5 is trying to collect the failure data, However, mlx5 doesn't create a storage for this command, since mlx5 doesn't use it. This lead to array-index-out-of-bounds error. Fix it by checking whether the command is known before collecting the failure data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
34f46ae0d4b38e83cfb26fb6f06b5b5efea47fdc to < 411e4d6caa7f7169192b8dacc8421ac4fd64a354affected34f46ae0d4b38e83cfb26fb6f06b5b5efea47fdc to < d8b6f175235d7327b4e1b13216859e89496dfbd5affected34f46ae0d4b38e83cfb26fb6f06b5b5efea47fdc to < 2a0a935fb64ee8af253b9c6133bb6702fb152ac2affected
Linux Linux
Default version status: affected
5.18affected0 to < 5.18unaffected6.1.31 to ≤ 6.1.*unaffected6.3.5 to ≤ 6.3.*unaffected6.4 to ≤ *unaffected