Vulnerability CVE-2024-40940
Published: 2024-07-12

Description:
In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

In case of flow rule creation fail in mlx5_lag_create_port_sel_table(),
instead of previously created rules, the tainted pointer is deleted
deveral times.
Fix this bug by using correct flow rules pointers.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

 References:
https://git.kernel.org/stable/c/531eab2da27dd42d68dfb841d82e987f4a6738b8
https://git.kernel.org/stable/c/d857df86837ac1c30592e8a068204d16feac9930
https://git.kernel.org/stable/c/a03a3fa12769e25f4385bee587afe1445aee7f7a
https://git.kernel.org/stable/c/229bedbf62b13af5aba6525ad10b62ad38d9ccb5
Copyright 2026, cxsecurity.com

 

Back to Top