REDHAT-BUG-2309801
First published: Wed Sep 04 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink When all the strides in a WQE have been consumed, the WQE is unlinked from the WQ linked list (mlx5_wq_ll_pop()). For SHAMPO, it is possible to receive CQEs with 0 consumed strides for the same WQE even after the WQE is fully consumed and unlinked. This triggers an additional unlink for the same wqe which corrupts the linked list. Fix this scenario by accepting 0 sized consumed strides without unlinking the WQE again.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2309801?
The severity of REDHAT-BUG-2309801 is critical, as it impacts the integrity of the WQE linked list in the Linux kernel.
How do I fix REDHAT-BUG-2309801?
To fix REDHAT-BUG-2309801, update your Linux kernel to the latest version that includes the necessary security patch.
Which versions of the Linux Kernel are affected by REDHAT-BUG-2309801?
REDHAT-BUG-2309801 affects multiple versions of the Linux Kernel that utilize the mlx5e driver.
What components are impacted by REDHAT-BUG-2309801?
The components impacted by REDHAT-BUG-2309801 are the SHAMPO feature and the mlx5e networking driver in the Linux kernel.
Is there a workaround for REDHAT-BUG-2309801?
Currently, there is no known workaround for REDHAT-BUG-2309801, and it is recommended to apply the patch as soon as it is available.
- agent/references
- agent/severity
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-44970
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux foundation
- canonical/linux kernel