CVE-2024-57801 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. So, the mlx5e_rep_priv is already freed while trying to get rpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free. So add the checking to make sure access the data of vport rep which is still loaded.
A use-after-free vulnerability has been identified in the Linux kernel's net/mlx5e component. This issue arises during the driver unload process when unregister_netdev is called after the vport rep has been unloaded. As a result, the mlx5e_rep_priv structure is already freed, leading to attempts to access rpriv->netdev or traverse rpriv->tc_ht', which causes the use-after-free condition. The vulnerability has been addressed by adding checks to ensure that the data of the vport rep is only accessed when it is still loaded.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 11, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3e45dd1622a2c1a83c11bf42fdd8c1810123d6c0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/47c78d3fc26e38ab805613a0f592dc8a820c7c64 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5a03b368562a7ff5f5f1f63b5adf8309cbdbd5be | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.6, < 6.6.70 >= 6.7, < 6.12.9 6.13 rc1 6.13 rc2 6.13 rc3 6.13 rc4 6.13 rc5 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 11, 2025 | CVE Modified | CISA-ADP |
| Jan 21, 2025 | Initial Analysis | [email protected] |
| Jan 15, 2025 | New CVE Received | kernel.org |