David Thompson

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a potential integer overflow in the EDAC/bluefield driver of the Linux kernel. This overflow occurs due to the left-shift operation of the `mem ctrl idx` variable, which is defined as 32-bits wide, causing the truncation of the upper 16 bits of information during the calculation of the SMC argument for the "get DIMM info" SMC call. The `mem ctrl idx` stack variable must be defined as 64-bits wide to prevent any potential integer overflow. **Recommendations** To resolve the issue, the `mem ctrl idx` stack variable must be defined as 64-bits wide to prevent any potential integer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 5.15.0-bf.6.gef6992a **Description** The vulnerability is related to the mlxbf gige driver in the Linux kernel, which encounters a NULL pointer exception during system shutdown via the "reboot" command. This exception occurs because the driver's shutdown() method is always executed, but the stop() method may not be executed if the networking interface configuration logic is not properly set up. As a result, NAPI remains enabled, leading to a potential exception if NAPI is scheduled while the hardware interface is partially deinitialized. The issue can cause a kernel panic and prevent the system from shutting down properly. **Recommendations** To resolve this issue, ensure that the networking interface managed by the mlxbf gige driver is properly stopped during system shutdown. This can be achieved by setting up the networking interface configuration logic within the Linux distribution to execute the stop() method. Additionally, consider updating to a newer version of the Linux kernel, such as 5.15.0-bf.6.gef6992a or later, which includes the resolved vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 5.15.0-1036-bluefield **Description** The vulnerability is related to the mlxbf gige driver in the Linux kernel. When kdump is enabled, the driver encounters a NULL pointer exception in the `mlxbf gige open()` function. This happens because there is a pending RX interrupt before the call to `request irq(RX IRQ)` executes, and the RX IRQ handler fires immediately after this `request irq()` completes. The issue can be reproduced by enabling kdump, triggering kdump via `/proc/sysrq-trigger`, and loading the mlxbf gige module. **Recommendations** To resolve the issue, update the Linux kernel to version 5.15.0-1036-bluefield or later. If an update is not available, consider disabling the `mlxbf gige` driver or the kdump feature as a temporary workaround to prevent the NULL pointer exception.