Описание
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enabling vport QoS fails, the scheduling node was never freed, causing a leak. Add the missing free and reset the vport scheduling node pointer to NULL.
Отчет
A low-impact memory leak flaw was found in the Linux kernel's mlx5 core driver (drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c) in the SR-IOV e-switch vport QoS handling. When enabling vport QoS fails, the allocated vport scheduling element (scheduling node) was never freed, leaking kernel memory on each failed enablement. A local user with the privileges required to configure vport QoS could repeatedly trigger this failing path to gradually exhaust kernel memory, resulting in resource exhaustion and a denial of service, with no impact on confidentiality or integrity. Red Hat Product Security rates this flaw Low severity (CVSS 3.3, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) because exploitation requires local privileged access, the leak only occurs in an error path, and the impact is limited to availability. This differs significantly from the upstream CVEORG CVSS score of 7.8 (Important, reflecting high confidentiality, integrity, and availability impact), which does not correspond to the nature of this error-path memory leak, and from the NIST score of 5.5 (Moderate), which assumes high availability impact. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams are not affected because the vulnerable code, introduced upstream in Linux kernel 6.13, is not present in the shipped Red Hat kernels, so no update is required for Red Hat customers.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
3.3 Low
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enabling vport QoS fails, the scheduling node was never freed, causing a leak. Add the missing free and reset the vport scheduling node pointer to NULL.
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enabling vport QoS fails, the scheduling node was never freed, causing a leak. Add the missing free and reset the vport scheduling node pointer to NULL.
In the Linux kernel, the following vulnerability has been resolved: n ...
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enabling vport QoS fails, the scheduling node was never freed, causing a leak. Add the missing free and reset the vport scheduling node pointer to NULL.
Уязвимость драйвера (drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c) ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
3.3 Low
CVSS3