Linux Kernel Vulnerability in MLX5 Driver Affecting Device Management

CVE-2024-57801

Summary

A vulnerability exists in the Linux kernel related to the MLX5 driver where the system may encounter a use-after-free condition. This occurs when the driver unloads without ensuring that certain virtual port representations are properly managed, resulting in attempts to access freed memory. Specifically, the issue arises when unregistering the network device while the virtual port representation has already been unloaded, which can potentially lead to instability or exploitation in a networked environment. Proper checks must be implemented to ensure data integrity during device management operations.

References