NACK: [SRU][F/J][PATCH 0/1] CVE-2024-26595

[Juerg Haefliger]

On Thu, 14 Nov 2024 13:53:35 +0800
Jian Hui Lee <jianhui.lee at canonical.com> wrote:

> [Impact]
> 
> mlxsw: spectrum_acl_tcam: Fix NULL Pointer dereference in error path
> 
> When calling mlxsw_sp_acl_tcam_region_destroy() from an error path after
> failing to attach the region to an ACL group, we hit a NULL pointer
> dereference.
> 
> Fix by retrieving the 'tcam' pointer using mlxsw_sp_acl_to_tcam().
> 
> [Fix]
> 
> noble:  not affected
> jammy:  backported from linux-stable
> focal:  backported from linux-stable
> bionic: backported from linux-stable. sent to esm
> xenial: not affected
> 
> [Test Case]
> 
> Compile and boot tested.
> 
> [Where problems could occur]
> 
> The fix affects mellanox ethernet switch driver. An issue with this fix
> may lead to kernel crashes or system instability after destroying tcam
> region.
> 
> Ido Schimmel (1):
>   mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
> 
>  drivers/net/ethernet/mellanox/mlxsw/spectrum.h          | 1 +
>  drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c      | 5 +++++
>  drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c | 4 ++--
>  3 files changed, 8 insertions(+), 2 deletions(-)
> 

Patches need rework per other reviewers comments.

...Juerg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20250116/57296988/attachment-0001.sig>