Beveiligingsadvies

CVE-2024-35835

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-17 14:02:23
Laatst bijgewerkt 2026-08-05 11:30:13
Toegewezen door Linux
CVSS-score 7.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, arfs_create_groups will free ft->g and return an error. However, arfs_create_table, the only caller of arfs_create_groups, will hold this error and call to mlx5e_destroy_flow_table, in which the ft->g will be freed again.