In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
Update Linux/Linux to 4ad319cdfbe555b4ff67bc608736c46a6930c848 if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scannet/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte affects Linux/Linux (generic), Linux/Linux (generic). Severity is high. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
AI coding agents often install or upgrade packages automatically in generic. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric |
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
Update Linux/Linux to 4ad319cdfbe555b4ff67bc608736c46a6930c848 if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scannet/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte affects Linux/Linux (generic), Linux/Linux (generic). Severity is high. In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70 This patch fixes the issue by both increasing the allocated buffers to accommodate for the needed actions and by checking the number of actions to prevent this issue when a rule with too many actions is provided.
AI coding agents often install or upgrade packages automatically in generic. A high vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric |
| >=1ffd498901c1134a7cbecf5409e12c064c39cef9 <4ad319cdfbe555b4ff67bc608736c46a6930c848 || >=1ffd498901c1134a7cbecf5409e12c064c39cef9 <0aec12d97b2036af0946e3d582144739860ac07b |
| 4ad319cdfbe555b4ff67bc608736c46a6930c848, 0aec12d97b2036af0946e3d582144739860ac07b |
| Linux/Linuxgeneric | 5.16 | Not reported |
|---|
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by CVE List V5 (cvelist).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard| >=1ffd498901c1134a7cbecf5409e12c064c39cef9 <4ad319cdfbe555b4ff67bc608736c46a6930c848 || >=1ffd498901c1134a7cbecf5409e12c064c39cef9 <0aec12d97b2036af0946e3d582144739860ac07b |
| 4ad319cdfbe555b4ff67bc608736c46a6930c848, 0aec12d97b2036af0946e3d582144739860ac07b |
| Linux/Linuxgeneric | 5.16 | Not reported |
|---|
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by CVE List V5 (cvelist).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard