CVE-2024-46857

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 module, which fixes bridge mode operations when there are no Virtual Functions (VFs). The issue occurs when trying to set the bridge mode attribute with numvfs=0, leading to a crash. The bridge mode is only relevant when there are multiple functions per port, so the setting is prevented when there are no VFs. Technical details include a kernel NULL pointer dereference at address 0000000000000030 and a call trace involving mlx5 eswitch set vepa locked and mlx5 eswitch set vepa functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.