NVD

CVE-2024-36006 Detail

Awaiting Analysis

This vulnerability is currently awaiting analysis.

Description

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call list_first_entry() on the respective lists without checking that the lists are not empty. This is incorrect usage of the API, which leads to the following warning [1]. Fix by returning if the lists are empty as there is nothing to migrate in this case. [1] WARNING: CPU: 0 PID: 6437 at drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c:1266 mlxsw_sp_acl_tcam_vchunk_migrate_all+0x1f1/0> Modules linked in: CPU: 0 PID: 6437 Comm: kworker/0:37 Not tainted 6.9.0-rc3-custom-00883-g94a65f079ef6 #39 Hardware name: Mellanox Technologies Ltd. MSN3700/VMOD0005, BIOS 5.11 01/06/2019 Workqueue: mlxsw_core mlxsw_sp_acl_tcam_vregion_rehash_work RIP: 0010:mlxsw_sp_acl_tcam_vchunk_migrate_all+0x1f1/0x2c0 [...] Call Trace: <TASK> mlxsw_sp_acl_tcam_vregion_rehash_work+0x6c/0x4a0 process_one_work+0x151/0x370 worker_thread+0x2cb/0x3e0 kthread+0xd0/0x100 ret_from_fork+0x34/0x50 ret_from_fork_asm+0x1a/0x30 </TASK>

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Hyperlink	Resource
https://git.kernel.org/stable/c/09846c2309b150b8ce4e0ce96f058197598fc530
https://git.kernel.org/stable/c/09846c2309b150b8ce4e0ce96f058197598fc530
https://git.kernel.org/stable/c/0b2c13b670b168e324e1cf109e67056a20fd610a
https://git.kernel.org/stable/c/0b2c13b670b168e324e1cf109e67056a20fd610a
https://git.kernel.org/stable/c/4526a56e02da3725db979358964df9cd9c567154
https://git.kernel.org/stable/c/4526a56e02da3725db979358964df9cd9c567154
https://git.kernel.org/stable/c/64435b64e43d8ee60faa46c0cd04e323e8b2a7b0
https://git.kernel.org/stable/c/64435b64e43d8ee60faa46c0cd04e323e8b2a7b0
https://git.kernel.org/stable/c/ab4ecfb627338e440ae11def004c524a00d93e40
https://git.kernel.org/stable/c/ab4ecfb627338e440ae11def004c524a00d93e40
https://git.kernel.org/stable/c/af8b593c3dd9df82cb199be65863af004b09fd97
https://git.kernel.org/stable/c/af8b593c3dd9df82cb199be65863af004b09fd97
https://git.kernel.org/stable/c/b377add0f0117409c418ddd6504bd682ebe0bf79
https://git.kernel.org/stable/c/b377add0f0117409c418ddd6504bd682ebe0bf79
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Weakness Enumeration

CWE-ID	CWE Name	Source

Change History

5 change records found show changes

CVE Modified by CVE 11/21/2024 4:21:24 AM

Action	Type	New Value
Added	Reference	https://git.kernel.org/stable/c/09846c2309b150b8ce4e0ce96f058197598fc530
Added	Reference	https://git.kernel.org/stable/c/0b2c13b670b168e324e1cf109e67056a20fd610a
Added	Reference	https://git.kernel.org/stable/c/4526a56e02da3725db979358964df9cd9c567154
Added	Reference	https://git.kernel.org/stable/c/64435b64e43d8ee60faa46c0cd04e323e8b2a7b0
Added	Reference	https://git.kernel.org/stable/c/ab4ecfb627338e440ae11def004c524a00d93e40
Added	Reference	https://git.kernel.org/stable/c/af8b593c3dd9df82cb199be65863af004b09fd97
Added	Reference	https://git.kernel.org/stable/c/b377add0f0117409c418ddd6504bd682ebe0bf79
Added	Reference	https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

New CVE Received from kernel.org 5/20/2024 6:15:14 AM

Action	Type	New Value
Added	Description	Record truncated, showing 500 of 1173 characters. View Entire Change Record In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call list_first_entry() on the respective lists without checking that the lists are not empty. This is incorrect usage of the API, which leads to the following warning [1]. Fix by returning if the lists are empty as there is nothing to migrate in th
Added	Reference	kernel.org https://git.kernel.org/stable/c/09846c2309b150b8ce4e0ce96f058197598fc530 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/0b2c13b670b168e324e1cf109e67056a20fd610a [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/4526a56e02da3725db979358964df9cd9c567154 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/64435b64e43d8ee60faa46c0cd04e323e8b2a7b0 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/ab4ecfb627338e440ae11def004c524a00d93e40 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/af8b593c3dd9df82cb199be65863af004b09fd97 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/b377add0f0117409c418ddd6504bd682ebe0bf79 [No types assigned]

Quick Info

CVE Dictionary Entry:
CVE-2024-36006
NVD Published Date:
05/20/2024
NVD Last Modified:
11/21/2024
Source:
kernel.org

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2024-36006 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Change History

CVE Modified by CVE 11/21/2024 4:21:24 AM

CVE Modified by kernel.org 11/05/2024 5:17:03 AM

CVE Modified by kernel.org 6/25/2024 6:15:34 PM

CVE Modified by kernel.org 5/29/2024 2:18:31 AM

New CVE Received from kernel.org 5/20/2024 6:15:14 AM

Quick Info