Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() When the reverse entry is found but its counter is already being released, refcount_inc_not_zero() fails and the reference taken by mlx5_tc_ct_entry_get() is never dropped before falling through to create_counter. Drop it so the reverse entry is not kept alive forever by a shared counter lookup that did not use it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 598daa5f95883f881a54967da40ce0fdfc1fdaa8affected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 79a3257280a335bbebbcd10d3895e8468bdcd6aeaffected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < c45c997d0c27359b502587897f775c5a277f0bd4affected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 288721013605b4e0304e10f6a087b77f71cfad11affected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 60eab87d0a798070bf5a856b1d9e5785ce92da53affected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 99d8dc51663747078c031acac32edc6d90c8f1f7affected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 1f13989a0704bd98cab09f9bee63e2c8a98ad4ddaffected1edae2335adfa7006853e8b427f0c7c3f46b51dd to < 0bf6bb567f0edaa771e7dd208ef98da50e6a4485affected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.55 to ≤ 6.18.*unaffected7.2.9 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/598daa5f95883f881a54967da40ce0fdfc1fdaa8 ↗
- https://git.kernel.org/stable/c/79a3257280a335bbebbcd10d3895e8468bdcd6ae ↗
- https://git.kernel.org/stable/c/c45c997d0c27359b502587897f775c5a277f0bd4 ↗
- https://git.kernel.org/stable/c/288721013605b4e0304e10f6a087b77f71cfad11 ↗
- https://git.kernel.org/stable/c/60eab87d0a798070bf5a856b1d9e5785ce92da53 ↗
- https://git.kernel.org/stable/c/99d8dc51663747078c031acac32edc6d90c8f1f7 ↗
- https://git.kernel.org/stable/c/1f13989a0704bd98cab09f9bee63e2c8a98ad4dd ↗
- https://git.kernel.org/stable/c/0bf6bb567f0edaa771e7dd208ef98da50e6a4485 ↗