NetSight
IP …
high7.8

CVE-2024-35835

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, a…

Impact

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails, arfs_create_groups will free ft->g and return an error. However, arfs_create_table, the only caller of arfs_create_groups, will hold this error and call to mlx5e_destroy_flow_table, in which the ft->g will be freed again.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.7 before 4.19.307
from 4.20 before 5.4.269
from 5.5 before 5.10.210
from 5.11 before 5.15.149
from 5.16 before 6.1.76
from 6.2 before 6.6.15
DebianDebian Linux
Version 10.0

Weakness classification

CWE-415

References