Memory Leak Vulnerability in Linux Kernel's MLX5 Driver

CVE-2024-56742

Summary

A vulnerability exists in the Linux kernel’s MLX5 driver that pertains to the vfio/mlx5 subsystem. It involves a programming flaw during the handling of migration pages in the mlx5vf_add_migration_pages() function. Specifically, if a set of pages is allocated but cannot be successfully added to the Scatter-Gather (SG) table, those pages must be properly freed to avoid memory leaks. The robust cleanup of allocated resources is essential to ensure system stability and performance. The issue is addressed in subsequent kernel patches, enhancing the overall reliability of the MLX5 driver.

References