In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free when dereferencing a neighbour [1]. The …
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free when dereferencing a neighbour [1]. The problem seems to be that the driver stores a pointer to the neighbour, but without holding a reference on it. A reference is only taken when the neighbour is used by a nexthop. Fix by simplifying the reference counting scheme. Always take a reference when storing a neighbour pointer in a neighbour …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/4a3c569005f42ab5e5b2ad637132a33bf102cc08
- https://git.kernel.org/stable/c/675c5aeadf6472672c472dc0f26401e4fcfbf254
- https://git.kernel.org/stable/c/8b0e69763ef948fb872a7767df4be665d18f5fd4
- https://git.kernel.org/stable/c/9e0a0d9eeb0dbeba2c83fa837885b19b8b9230fc
- https://git.kernel.org/stable/c/a2dfe6758fc63e542105bee8b17a3a7485684db0
- https://git.kernel.org/stable/c/c437fbfd4382412598cdda1f8e2881b523668cc2
- https://git.kernel.org/stable/c/ed8141b206bdcfd5d0b92c90832eeb77b7a60a0a
Timeline
- nvd_ingest NVD