In the Linux kernel, the following vulnerability has been resolved:
nfp: flower: handle acti_netdevs allocation failure
The kmallocarray() in nfpfllagdowork() will return null, if the physical memory has run out. As a result, if we dereference the actinetdevs, the null pointer dereference bugs will happen.
This patch adds a check to judge whether allocation failure occurs. If it happens, the delayed work will be rescheduled and try again.
[
{
"id": "CVE-2024-27046-0a6e69a3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@84e95149bd341705f0eca6a7fcb955c548805002",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-10da650e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d746889db75a76aeee95fb705b8e1ac28c684a2e",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-1151c698",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d387dc503f9a53e6d1f6e9dd0292d38f083eba5",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-19132fd8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b1e8a617eb0f4cdc19def530047a95b5abde07d",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-57296e51",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d8eb1238377cd994829f9162ae396a84ae037b2",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-70067d4a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d746889db75a76aeee95fb705b8e1ac28c684a2e",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-75bce824",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@408ba7fd04f959c61b50db79c983484312fea642",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-866e15e2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d387dc503f9a53e6d1f6e9dd0292d38f083eba5",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-8aabdde1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8df9203bf22c66fa26e8d8c7f8ce181cf88099d",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-9e86f496",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@408ba7fd04f959c61b50db79c983484312fea642",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-a6d79f02",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9d8eb1238377cd994829f9162ae396a84ae037b2",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-d6f9c115",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8df9203bf22c66fa26e8d8c7f8ce181cf88099d",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-d84c79a0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9b4e220dd18f79507803f38a55d53b483f6c9c3",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-d9b6256c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9b4e220dd18f79507803f38a55d53b483f6c9c3",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-dc99e2be",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@928705e341010dd910fdece61ccb974f494a758f",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-f1f74593",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@928705e341010dd910fdece61ccb974f494a758f",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c",
"function": "nfp_fl_lag_do_work"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 2033.0,
"function_hash": "175097775590208967724509099546326768385"
}
},
{
"id": "CVE-2024-27046-f445186f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b1e8a617eb0f4cdc19def530047a95b5abde07d",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-27046-f552a606",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@84e95149bd341705f0eca6a7fcb955c548805002",
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/netronome/nfp/flower/lag_conf.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105219977725229783171849280852606372798",
"315620013150805373563609206710776649112",
"299250360644803150027947441595878468710",
"196495230288259585488878002141388263383"
],
"threshold": 0.9
}
}
]