In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_builder_alloc() kvzalloc() may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0168ab6fbd9e50d20b97486168b604b2ab28a2ca cve-icon cve-icon
https://git.kernel.org/stable/c/1bcc86cc721bea68980098f51f102aa2c2b9d932 cve-icon cve-icon
https://git.kernel.org/stable/c/4655456a64a0f936098c8432bac64e7176bd2aff cve-icon cve-icon
https://git.kernel.org/stable/c/4d80dde26d7bab1320210279483ac854dcb274b2 cve-icon cve-icon
https://git.kernel.org/stable/c/b48ee5bb25c02ca2b81e0d16bf8af17ab6ed3f8b cve-icon cve-icon
https://git.kernel.org/stable/c/f25389e779500cf4a59ef9804534237841bce536 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024102139-CVE-2024-50000-c542@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-50000 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-50000 cve-icon
History

Fri, 25 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Tue, 22 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Oct 2024 13:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 21 Oct 2024 18:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_builder_alloc() kvzalloc() may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Title net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-10-21T18:02:39.600Z

Updated: 2025-05-04T09:43:28.451Z

Reserved: 2024-10-21T12:17:06.057Z

Link: CVE-2024-50000

cve-icon Vulnrichment

Updated: 2024-10-22T13:30:08.965Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-21T18:15:20.063

Modified: 2024-10-25T19:55:55.357

Link: CVE-2024-50000

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-10-21T00:00:00Z

Links: CVE-2024-50000 - Bugzilla