Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164

Description The issue is related to an use-after-free bug in the mlx4 en try alloc resources() function. The actual impact and attack plausibility have not yet been proven.

Recommendations For Linux Kernel versions prior to v5.4.164, update to version v5.4.164 or later to resolve the issue. As a temporary workaround, consider restricting access to the mlx4 en module until a patch is available.