CVE-2024-27014

When disabling aRFS under the priv->state_lock, any scheduled aRFS works are canceled using the cancel_work_sync function, which waits for the work to end if it has already started. However, while waiting for the work handler, the handler will try to acquire the state_lock which is already acquired.

The worker acquires the lock to delete the rules if the state is down, which is not the worker's responsibility since disabling aRFS deletes the rules.

Add an aRFS state variable, which indicates whether the aRFS is enabled and prevent adding rules when the aRFS is disabled.

Kernel log:

====================================================== WARNING: possible circular locking dependency detected

6.7.0-rc4netnextmlx55483eb2 #1 Tainted: G I

ethtool/386089 is trying to acquire lock: ffff88810f21ce68 ((workcompletion)(&rule->arfswork)){+.+.}-{0:0}, at: _flushwork+0x74/0x4e0

but task is already holding lock: ffff8884a1808cc0 (&priv->statelock){+.+.}-{3:3}, at: mlx5eethtoolsetchannels+0x53/0x200 [mlx5_core]

which lock already depends on the new lock.

the existing dependency chain (in reverse order) is:

-> #1 (&priv->statelock){+.+.}-{3:3}: _mutexlock+0x80/0xc90 arfshandlework+0x4b/0x3b0 [mlx5core] processonework+0x1dc/0x4a0 workerthread+0x1bf/0x3c0 kthread+0xd7/0x100 retfromfork+0x2d/0x50 retfromforkasm+0x11/0x20

-> #0 ((workcompletion)(&rule->arfswork)){+.+.}-{0:0}: _lockacquire+0x17b4/0x2c80 lockacquire+0xd0/0x2b0 _flushwork+0x7a/0x4e0 _cancelworktimer+0x131/0x1c0 arfsdelrules+0x143/0x1e0 [mlx5core] mlx5earfsdisable+0x1b/0x30 [mlx5core] mlx5eethtoolsetchannels+0xcb/0x200 [mlx5core] ethnlsetchannels+0x28f/0x3b0 ethnldefaultsetdoit+0xec/0x240 genlfamilyrcvmsgdoit+0xd0/0x120 genlrcvmsg+0x188/0x2c0 netlinkrcvskb+0x54/0x100 genlrcv+0x24/0x40 netlinkunicast+0x1a1/0x270 netlinksendmsg+0x214/0x460 _socksendmsg+0x38/0x60 _syssendto+0x113/0x170 _x64syssendto+0x20/0x30 dosyscall64+0x40/0xe0 entrySYSCALL64after_hwframe+0x46/0x4e

other info that might help us debug this:

Possible unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(&priv->statelock); lock((workcompletion)(&rule->arfswork)); lock(&priv->statelock); lock((workcompletion)(&rule->arfswork));

* DEADLOCK *

3 locks held by ethtool/386089: #0: ffffffff82ea7210 (cblock){++++}-{3:3}, at: genlrcv+0x15/0x40 #1: ffffffff82e94c88 (rtnlmutex){+.+.}-{3:3}, at: ethnldefaultsetdoit+0xd3/0x240 #2: ffff8884a1808cc0 (&priv->statelock){+.+.}-{3:3}, at: mlx5eethtoolsetchannels+0x53/0x200 [mlx5_core]

stack backtrace: CPU: 15 PID: 386089 Comm: ethtool Tainted: G I 6.7.0-rc4netnextmlx55483eb2 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dumpstacklvl+0x60/0xa0 checknoncircular+0x144/0x160 _lockacquire+0x17b4/0x2c80 lockacquire+0xd0/0x2b0 ? _flushwork+0x74/0x4e0 ? savetrace+0x3e/0x360 ? _flushwork+0x74/0x4e0 _flushwork+0x7a/0x4e0 ? _flushwork+0x74/0x4e0 ? _lockacquire+0xa78/0x2c80 ? lockacquire+0xd0/0x2b0 ? markheldlocks+0x49/0x70 _cancelworktimer+0x131/0x1c0 ? markheldlocks+0x49/0x70 arfsdelrules+0x143/0x1e0 [mlx5core] mlx5earfsdisable+0x1b/0x30 [mlx5core] mlx5eethtoolsetchannels+0xcb/0x200 [mlx5core] ethnlsetchannels+0x28f/0x3b0 ethnldefaultsetdoit+0xec/0x240 genlfamilyrcvmsgdoit+0xd0/0x120 genlrcvmsg+0x188/0x2c0 ? ethn ---truncated---

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

45bf454ae88414e80b80979ebb2c22bd66ea7d1b

Fixed

46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

45bf454ae88414e80b80979ebb2c22bd66ea7d1b

Fixed

48c4bb81df19402d4346032353d0795260255e3b

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

45bf454ae88414e80b80979ebb2c22bd66ea7d1b

Fixed

0080bf99499468030248ebd25dd645e487dcecdc

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

45bf454ae88414e80b80979ebb2c22bd66ea7d1b

Fixed

fef965764cf562f28afb997b626fc7c3cec99693

Affected versions

v4.*

v4.10

v4.10-rc1

v4.10-rc2

v4.10-rc3

v4.10-rc4

v4.10-rc5

v4.10-rc6

v4.10-rc7

v4.10-rc8

v4.11

v4.11-rc1

v4.11-rc2

v4.11-rc3

v4.11-rc4

v4.11-rc5

v4.11-rc6

v4.11-rc7

v4.11-rc8

v4.12

v4.12-rc1

v4.12-rc2

v4.12-rc3

v4.12-rc4

v4.12-rc5

v4.12-rc6

v4.12-rc7

v4.13

v4.13-rc1

v4.13-rc2

v4.13-rc3

v4.13-rc4

v4.13-rc5

v4.13-rc6

v4.13-rc7

v4.14

v4.14-rc1

v4.14-rc2

v4.14-rc3

v4.14-rc4

v4.14-rc5

v4.14-rc6

v4.14-rc7

v4.14-rc8

v4.15

v4.15-rc1

v4.15-rc2

v4.15-rc3

v4.15-rc4

v4.15-rc5

v4.15-rc6

v4.15-rc7

v4.15-rc8

v4.15-rc9

v4.16

v4.16-rc1

v4.16-rc2

v4.16-rc3

v4.16-rc4

v4.16-rc5

v4.16-rc6

v4.16-rc7

v4.17

v4.17-rc1

v4.17-rc2

v4.17-rc3

v4.17-rc4

v4.17-rc5

v4.17-rc6

v4.17-rc7

v4.18

v4.18-rc1

v4.18-rc2

v4.18-rc3

v4.18-rc4

v4.18-rc5

v4.18-rc6

v4.18-rc7

v4.18-rc8

v4.19

v4.19-rc1

v4.19-rc2

v4.19-rc3

v4.19-rc4

v4.19-rc5

v4.19-rc6

v4.19-rc7

v4.19-rc8

v4.20

v4.20-rc1

v4.20-rc2

v4.20-rc3

v4.20-rc4

v4.20-rc5

v4.20-rc6

v4.20-rc7

v4.6

v4.6-rc6

v4.6-rc7

v4.7

v4.7-rc1

v4.7-rc2

v4.7-rc3

v4.7-rc4

v4.7-rc5

v4.7-rc6

v4.7-rc7

v4.8

v4.8-rc1

v4.8-rc2

v4.8-rc3

v4.8-rc4

v4.8-rc5

v4.8-rc6

v4.8-rc7

v4.8-rc8

v4.9

v4.9-rc1

v4.9-rc2

v4.9-rc3

v4.9-rc4

v4.9-rc5

v4.9-rc6

v4.9-rc7

v4.9-rc8

v5.*

v5.0

v5.0-rc1

v5.0-rc2

v5.0-rc3

v5.0-rc4

v5.0-rc5

v5.0-rc6

v5.0-rc7

v5.0-rc8

v5.1

v5.1-rc1

v5.1-rc2

v5.1-rc3

v5.1-rc4

v5.1-rc5

v5.1-rc6

v5.1-rc7

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.2

v5.2-rc1

v5.2-rc2

v5.2-rc3

v5.2-rc4

v5.2-rc5

v5.2-rc6

v5.2-rc7

v5.3

v5.3-rc1

v5.3-rc2

v5.3-rc3

v5.3-rc4

v5.3-rc5

v5.3-rc6

v5.3-rc7

v5.3-rc8

v5.4

v5.4-rc1

v5.4-rc2

v5.4-rc3

v5.4-rc4

v5.4-rc5

v5.4-rc6

v5.4-rc7

v5.4-rc8

v5.5

v5.5-rc1

v5.5-rc2

v5.5-rc3

v5.5-rc4

v5.5-rc5

v5.5-rc6

v5.5-rc7

v5.6

v5.6-rc1

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.75

v6.1.76

v6.1.77

v6.1.78

v6.1.79

v6.1.8

v6.1.80

v6.1.81

v6.1.82

v6.1.83

v6.1.84

v6.1.85

v6.1.86

v6.1.87

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.3

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.8.1

v6.8.2

v6.8.3

v6.8.4

v6.8.5

v6.8.6

v6.8.7

v6.9-rc1

v6.9-rc2

v6.9-rc3

Database specific

vanir_signatures

[
    {
        "id": "CVE-2024-27014-045cb69a",
        "target": {
            "function": "arfs_handle_work",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48c4bb81df19402d4346032353d0795260255e3b",
        "deprecated": false,
        "digest": {
            "length": 811.0,
            "function_hash": "216572781889842473957760479258253860853"
        }
    },
    {
        "id": "CVE-2024-27014-26f9c418",
        "target": {
            "function": "mlx5e_rx_flow_steer",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef965764cf562f28afb997b626fc7c3cec99693",
        "deprecated": false,
        "digest": {
            "length": 1171.0,
            "function_hash": "177297491058497699579026415148586821728"
        }
    },
    {
        "id": "CVE-2024-27014-2c3c193e",
        "target": {
            "function": "mlx5e_rx_flow_steer",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b",
        "deprecated": false,
        "digest": {
            "length": 1010.0,
            "function_hash": "226167137378308740115019427582278523879"
        }
    },
    {
        "id": "CVE-2024-27014-2efa0fa8",
        "target": {
            "function": "mlx5e_arfs_enable",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48c4bb81df19402d4346032353d0795260255e3b",
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "305294315978723928767957551982827867611"
        }
    },
    {
        "id": "CVE-2024-27014-3350ca37",
        "target": {
            "function": "mlx5e_rx_flow_steer",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48c4bb81df19402d4346032353d0795260255e3b",
        "deprecated": false,
        "digest": {
            "length": 1171.0,
            "function_hash": "177297491058497699579026415148586821728"
        }
    },
    {
        "id": "CVE-2024-27014-37a343d3",
        "target": {
            "function": "arfs_del_rules",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef965764cf562f28afb997b626fc7c3cec99693",
        "deprecated": false,
        "digest": {
            "length": 563.0,
            "function_hash": "160179020385313057365204588865080122291"
        }
    },
    {
        "id": "CVE-2024-27014-38a562e8",
        "target": {
            "function": "arfs_del_rules",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48c4bb81df19402d4346032353d0795260255e3b",
        "deprecated": false,
        "digest": {
            "length": 563.0,
            "function_hash": "160179020385313057365204588865080122291"
        }
    },
    {
        "id": "CVE-2024-27014-683712b2",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0080bf99499468030248ebd25dd645e487dcecdc",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "236687107157396799858185704151323638835",
                "24577221151805397342271118549925999197",
                "128189793269660142004318673786901312421",
                "60353246309319056950156670165568606529",
                "221461734269391658492431537271035929205",
                "310272830683448248702382527275750195531",
                "60871608910665633420008951346916016164",
                "43021765785219929018559185211274092739",
                "22442300463467650316698611349993398415",
                "267868390585593816517915983992887850017",
                "97055607617978583033919254959978099272",
                "308338644694900432243002527565329676856",
                "189586188903822238746454279556549418410",
                "269562805864086294616113448790485351155",
                "297163271873725573974678152531841702260",
                "22481066107837065078487365729824293327",
                "225191898109630804948982243288014194404",
                "174444110410702087227083307933624648268",
                "93453093976911684022685964733251949450",
                "96840326429679415113600463506616241432",
                "219380917041433735708466430498308856010",
                "246999966537818021272118714013237250705",
                "5081816977378543199950640470879355946",
                "206682731884654754027848222034536531281",
                "154870297467331697072729310855823999396",
                "106608933477089508355991412273174804270",
                "288281201487922479105290911527065234565",
                "12770428430943677723512544070453755780",
                "31392535074359270709584872606123635372",
                "282039712239340644725797198281067806350",
                "94175646181458836977781775912193116829"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2024-27014-6a5a3352",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef965764cf562f28afb997b626fc7c3cec99693",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "236687107157396799858185704151323638835",
                "24577221151805397342271118549925999197",
                "128189793269660142004318673786901312421",
                "60353246309319056950156670165568606529",
                "221461734269391658492431537271035929205",
                "310272830683448248702382527275750195531",
                "60871608910665633420008951346916016164",
                "43021765785219929018559185211274092739",
                "22442300463467650316698611349993398415",
                "267868390585593816517915983992887850017",
                "97055607617978583033919254959978099272",
                "308338644694900432243002527565329676856",
                "189586188903822238746454279556549418410",
                "269562805864086294616113448790485351155",
                "297163271873725573974678152531841702260",
                "22481066107837065078487365729824293327",
                "225191898109630804948982243288014194404",
                "174444110410702087227083307933624648268",
                "93453093976911684022685964733251949450",
                "96840326429679415113600463506616241432",
                "219380917041433735708466430498308856010",
                "246999966537818021272118714013237250705",
                "5081816977378543199950640470879355946",
                "206682731884654754027848222034536531281",
                "154870297467331697072729310855823999396",
                "106608933477089508355991412273174804270",
                "288281201487922479105290911527065234565",
                "12770428430943677723512544070453755780",
                "31392535074359270709584872606123635372",
                "282039712239340644725797198281067806350",
                "94175646181458836977781775912193116829"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2024-27014-6d284d1b",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "236687107157396799858185704151323638835",
                "24577221151805397342271118549925999197",
                "128189793269660142004318673786901312421",
                "216004000764647083937514675088083631261",
                "150508823637275622023154030935967586090",
                "310272830683448248702382527275750195531",
                "60871608910665633420008951346916016164",
                "43021765785219929018559185211274092739",
                "22442300463467650316698611349993398415",
                "267868390585593816517915983992887850017",
                "97055607617978583033919254959978099272",
                "308338644694900432243002527565329676856",
                "189586188903822238746454279556549418410",
                "269562805864086294616113448790485351155",
                "297163271873725573974678152531841702260",
                "22481066107837065078487365729824293327",
                "225191898109630804948982243288014194404",
                "174444110410702087227083307933624648268",
                "93453093976911684022685964733251949450",
                "96840326429679415113600463506616241432",
                "219380917041433735708466430498308856010",
                "246999966537818021272118714013237250705",
                "5081816977378543199950640470879355946",
                "206682731884654754027848222034536531281",
                "154870297467331697072729310855823999396",
                "106608933477089508355991412273174804270",
                "288281201487922479105290911527065234565",
                "12770428430943677723512544070453755780",
                "31392535074359270709584872606123635372",
                "282039712239340644725797198281067806350",
                "68723667014471058293013339273379744239"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2024-27014-713c16d6",
        "target": {
            "function": "arfs_handle_work",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef965764cf562f28afb997b626fc7c3cec99693",
        "deprecated": false,
        "digest": {
            "length": 811.0,
            "function_hash": "216572781889842473957760479258253860853"
        }
    },
    {
        "id": "CVE-2024-27014-7922bd6c",
        "target": {
            "function": "arfs_del_rules",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b",
        "deprecated": false,
        "digest": {
            "length": 563.0,
            "function_hash": "160179020385313057365204588865080122291"
        }
    },
    {
        "id": "CVE-2024-27014-8f747858",
        "target": {
            "function": "mlx5e_rx_flow_steer",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0080bf99499468030248ebd25dd645e487dcecdc",
        "deprecated": false,
        "digest": {
            "length": 1171.0,
            "function_hash": "177297491058497699579026415148586821728"
        }
    },
    {
        "id": "CVE-2024-27014-991c45a2",
        "target": {
            "function": "mlx5e_arfs_enable",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0080bf99499468030248ebd25dd645e487dcecdc",
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "305294315978723928767957551982827867611"
        }
    },
    {
        "id": "CVE-2024-27014-9e19dcfc",
        "target": {
            "function": "mlx5e_arfs_enable",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef965764cf562f28afb997b626fc7c3cec99693",
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "305294315978723928767957551982827867611"
        }
    },
    {
        "id": "CVE-2024-27014-a7ddbab5",
        "target": {
            "function": "mlx5e_arfs_enable",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b",
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "305294315978723928767957551982827867611"
        }
    },
    {
        "id": "CVE-2024-27014-b9272a3e",
        "target": {
            "function": "arfs_del_rules",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0080bf99499468030248ebd25dd645e487dcecdc",
        "deprecated": false,
        "digest": {
            "length": 563.0,
            "function_hash": "160179020385313057365204588865080122291"
        }
    },
    {
        "id": "CVE-2024-27014-ca24fcbe",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48c4bb81df19402d4346032353d0795260255e3b",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "236687107157396799858185704151323638835",
                "24577221151805397342271118549925999197",
                "128189793269660142004318673786901312421",
                "60353246309319056950156670165568606529",
                "221461734269391658492431537271035929205",
                "310272830683448248702382527275750195531",
                "60871608910665633420008951346916016164",
                "43021765785219929018559185211274092739",
                "22442300463467650316698611349993398415",
                "267868390585593816517915983992887850017",
                "97055607617978583033919254959978099272",
                "308338644694900432243002527565329676856",
                "189586188903822238746454279556549418410",
                "269562805864086294616113448790485351155",
                "297163271873725573974678152531841702260",
                "22481066107837065078487365729824293327",
                "225191898109630804948982243288014194404",
                "174444110410702087227083307933624648268",
                "93453093976911684022685964733251949450",
                "96840326429679415113600463506616241432",
                "219380917041433735708466430498308856010",
                "246999966537818021272118714013237250705",
                "5081816977378543199950640470879355946",
                "206682731884654754027848222034536531281",
                "154870297467331697072729310855823999396",
                "106608933477089508355991412273174804270",
                "288281201487922479105290911527065234565",
                "12770428430943677723512544070453755780",
                "31392535074359270709584872606123635372",
                "282039712239340644725797198281067806350",
                "94175646181458836977781775912193116829"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2024-27014-e265c92a",
        "target": {
            "function": "arfs_handle_work",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0080bf99499468030248ebd25dd645e487dcecdc",
        "deprecated": false,
        "digest": {
            "length": 811.0,
            "function_hash": "216572781889842473957760479258253860853"
        }
    },
    {
        "id": "CVE-2024-27014-ec18abe3",
        "target": {
            "function": "arfs_handle_work",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b",
        "deprecated": false,
        "digest": {
            "length": 747.0,
            "function_hash": "41768339536697023749615706311716137195"
        }
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.7.0

Fixed

6.1.88

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.29

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.8.8