Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() function generally returns NULL on error but sometimes we want it to return ERR_PTR(-EBUSY) so the caller can retry. The problem here is that "ret" can be either -EBUSY or -ENOMEM and if it's and -ENOMEM then the error pointer is propogated back and eventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
11a45def2e197532c46aa908dedd52bc1ee378a2 to < 61f720e801443d4e2a3c0261eda4ad8431458dcaaffected11a45def2e197532c46aa908dedd52bc1ee378a2 to < 325cf73a1b449fea3158ab99d03a7a717aad1618affected11a45def2e197532c46aa908dedd52bc1ee378a2 to < a59c61a1869ceefc65ef02886f91e8cd0062211faffected11a45def2e197532c46aa908dedd52bc1ee378a2 to < 11776cff0b563c8b8a4fa76cab620bfb633a8cb8affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.121 to ≤ 6.1.*unaffected6.6.67 to ≤ 6.6.*unaffected6.12.6 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/61f720e801443d4e2a3c0261eda4ad8431458dca ↗
- https://git.kernel.org/stable/c/325cf73a1b449fea3158ab99d03a7a717aad1618 ↗
- https://git.kernel.org/stable/c/a59c61a1869ceefc65ef02886f91e8cd0062211f ↗
- https://git.kernel.org/stable/c/11776cff0b563c8b8a4fa76cab620bfb633a8cb8 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗